Priority LOW 28
The RT Mega Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'css[left]' parameter in all versions up to, and including, 1.5.1 due to insufficient input sanitization and output escaping.
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00349 · Published 2026-09-18 · No fix listed CWE-79
Priority LOW 28
The RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'pointer_menu_item' Block Attribute in all versions up to, and including, 1.5.2 due to…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00356 · Published 2026-09-18 · No fix listed CWE-79
Priority LOW 29
Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00299 · Published 2026-07-27 · No fix listed CWE-862
Priority LOW 28
Subscriber Cross Site Scripting (XSS) in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00224 · Published 2026-07-27 · No fix listed CWE-79
Priority MEDIUM 49
Unauthenticated Privilege Escalation in Easy Elements for Elementor – Addons & Website Templates <= 1.4.9 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00525 · Published 2026-06-26 · No fix listed CWE-266
Priority MEDIUM 41
The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.5 via the `easyel_handle_register()` function.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00713 · Published 2026-05-22 · No fix listed CWE-269
Priority MEDIUM 49
The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to privilege escalation via user registration in all versions up to, and including, 1.4.4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00494 · Published 2026-05-20 · No fix listed CWE-269
Priority LOW 29
Missing Authorization vulnerability in themewant Easy Hotel Booking easy-hotel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Hotel Booking: from n/a through <= 1.9.2.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00354 · Published 2026-02-20 · No fix listed CWE-862
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themewant Easy Hotel Booking easy-hotel allows DOM-Based XSS.This issue affects Easy Hotel Booking: from n/a through <…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00223 · Published 2025-09-22 · No fix listed CWE-79