Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: pencilwp Clear all filters
TI-2026-19844 CVE-2026-24605 · GHSA-wvc4-6xqp-9v2f

WordPress X Addons for Elementor plugin <= 1.0.23 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in pencilwp X Addons for Elementor x-addons-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects X Addons for Elementor: from n/a throug…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00277 Published 2026-01-23 No fix listed CWE-862
TI-2026-18099 CVE-2026-22518 · GHSA-x8xj-f5m5-qr25

WordPress X Addons for Elementor plugin <= 1.0.23 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pencilwp X Addons for Elementor x-addons-elementor allows DOM-Based XSS.This issue affects X Addons for Elementor: fro…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00209 Published 2026-01-08 No fix listed CWE-79
TI-2025-30502 CVE-2025-48132 · GHSA-fhmg-vgv9-r776

WordPress X Addons for Elementor plugin <= 1.0.16 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pencilwp X Addons for Elementor x-addons-elementor allows Stored XSS.This issue affects X Addons for Elementor: from n…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00216 Published 2025-05-16 No fix listed CWE-79