Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Vendor: voidCoders Clear all filters
TI-2025-42095 CVE-2025-68574 · GHSA-7pxg-x55c-fqhx

WordPress WPBakery Visual Composer WHMCS Elements plugin <= 1.0.4.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in voidcoders WPBakery Visual Composer WHMCS Elements void-visual-whmcs-element allows DOM-Based XSS.This issue affects W…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0021 Published 2025-12-24 No fix listed CWE-79
TI-2025-30156 CVE-2025-47659 · GHSA-v5hx-jf5m-m3wr

WordPress WPBakery Visual Composer WHMCS Elements plugin <= 1.0.4.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in voidcoders WPBakery Visual Composer WHMCS Elements void-visual-whmcs-element allows Stored XSS.This issue affects WPBa…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00222 Published 2025-05-07 No fix listed CWE-79
TI-2024-09432 CVE-2024-10172 · GHSA-3jpf-3f2w-hm6f

Cross-site scripting in voidCoders Innovs WPBakery Visual Composer WHMCS Elements

Priority LOW 29

The WPBakery Visual Composer WHMCS Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's void_wbwhmcse_laouts_search shortcode in all versions up to, and including, 1.0.4 due to insu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00536 Published 2024-11-21 No fix listed CWE-79
TI-2024-28933 CVE-2024-43281 · GHSA-5mg4-xpj4-crpr

WordPress Void Elementor Post Grid Addon for Elementor Page builder plugin <= 2.3 - Local File Inclusion vulnerability

Priority LOW 25

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in VOID CODERS Void Elementor Post Grid Addon for Elementor Page builder allows PHP Local File Inclusion.This issue affects Voi…

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00484 Published 2024-08-19 No fix listed CWE-22
TI-2024-28943 CVE-2024-43291 · GHSA-7gwf-65pq-33ww

Cross-site scripting in voidCoders Void Contact Form 7 Widget For Elementor Page Builder

Priority LOW 26

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder allows Stored XSS.This issue affects Void Cont…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0026 Published 2024-08-18 No fix listed CWE-79
TI-2024-05035 CVE-2024-5419 · GHSA-wfv7-jxcv-wwf4

Cross-site scripting in voidthemes Void Contact Form 7 Widget For Elementor Page Builder

Priority LOW 28

The Void Contact Form 7 Widget For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cf7_redirect_page' attribute within the plugin's Void Contact From 7 widget in all vers…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00341 Published 2024-07-02 No fix listed CWE-79
TI-2023-28642 CVE-2023-52214 · GHSA-7pfr-rxmf-5m47

WordPress Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.3 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder.This issue affects Void Contact Form 7 Widget For Elementor Page Builder: from n/a through 2.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00414 Published 2024-03-26 No fix listed CWE-862