Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: Plugin Devs Clear all filters
TI-2025-35808 CVE-2025-57955 · GHSA-4p6q-43xv-394v

WordPress Post Carousel Slider for Elementor Plugin <= 1.7.0 - Broken Access Control Vulnerability

Priority LOW 29

Missing Authorization vulnerability in Plugin Devs Post Carousel Slider for Elementor post-carousel-slider-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Car…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00462 Published 2025-09-22 No fix listed CWE-862
TI-2025-36469 CVE-2025-58816 · GHSA-w37g-m6qw-h883

WordPress Product Carousel Slider for Elementor Plugin <= 2.1.3 - Broken Access Control Vulnerability

Priority LOW 16

Missing Authorization vulnerability in Plugin Devs Product Carousel Slider for Elementor ecommerce-product-carousel-slider-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00247 Published 2025-09-05 No fix listed CWE-862
TI-2025-03412 CVE-2025-3863 · GHSA-68xg-x7j2-m7g4

Missing authorization in Plugin Devs Post Carousel Slider for Elementor

Priority LOW 20

The Post Carousel Slider for Elementor plugin for WordPress is vulnerable to improper authorization due to a missing capability check on the process_wbelps_promo_form() function in all versions up to, and including, 1.6.…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00285 Published 2025-06-26 No fix listed CWE-862
TI-2025-22932 CVE-2025-31795 · GHSA-fv9g-xm5q-w2rc

WordPress Shopify to WooCommerce Migration plugin <= 1.3.0 - Settings Change vulnerability

Priority LOW 35

Missing Authorization vulnerability in Plugin Devs Shopify to WooCommerce Migration migrate-shopify-to-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shopify to Woo…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00391 Published 2025-04-03 No fix listed CWE-862
TI-2025-16531 CVE-2025-22648 · GHSA-5fc4-wfxq-2rjr

WordPress Blog, Posts and Category Filter for Elementor plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Devs Blog, Posts and Category Filter for Elementor blog-posts-and-category-for-elementor allows Stored XSS.This…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00256 Published 2025-03-27 No fix listed CWE-79
TI-2024-36367 CVE-2024-54278 · GHSA-2q85-m42h-7pqh

WordPress News Ticker for Elementor plugin <= 2.1.3 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Plugin Devs News Ticker for Elementor news-ticker-for-elementor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects News Ticker for Elementor: from n/…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00441 Published 2024-12-13 No fix listed CWE-862
TI-2024-35947 CVE-2024-53749 · GHSA-g3c7-wp5g-pgpj

WordPress Post Carousel Slider for Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Devs Post Carousel Slider for Elementor post-carousel-slider-for-elementor allows Stored XSS.This issue affects…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00239 Published 2024-12-01 No fix listed CWE-79
TI-2024-04342 CVE-2024-4667 · GHSA-7mhh-2q9c-rq3r

Cross-site scripting in Plugin Devs Blog, Posts and Category Filter for Elementor

Priority LOW 28

The Blog, Posts and Category Filter for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post and Category Filter widget in all versions up to, and including, 1.0.3 due to insufficient…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00322 Published 2024-07-09 No fix listed CWE-79