Vulnerabilities

TI-2026-44385 CVE-2026-62109 · GHSA-9qpv-2jqp-jgpj

WordPress Sky Addons for Elementor plugin <= 3.8.4 - SQL Injection vulnerability

LOW 33

Editor SQL Injection in Sky Addons for Elementor <= 3.8.4 versions.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00383 Published 2026-09-11 No fix listed CWE-89

TI-2026-06571 CVE-2026-7475 · GHSA-59rm-h9h8-h9gh

Sky Addons <= 3.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Script

LOW 28

The Sky Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `sky-custom-scripts` custom post type in all versions up to, and including, 3.3.2.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00244 Published 2026-05-08 No fix listed CWE-79

TI-2025-07516 CVE-2025-8216 · GHSA-rh5h-m336-29fp

Sky Addons for Elementor <= 3.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

LOW 28

The Sky Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Multiple widgets in all versions up to, and including, 3.1.4 due to insufficient input sanitization and output escaping o…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00264 Published 2025-07-29 No fix listed CWE-79

TI-2025-29012 CVE-2025-46260 · GHSA-fccr-g7xh-4c68

WordPress Sky Addons for Elementor plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wowDevs Sky Addons for Elementor sky-elementor-addons allows Stored XSS.This issue affects Sky Addons for Elementor: f…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00274 Published 2025-04-24 No fix listed CWE-79

TI-2024-10748 CVE-2024-11601 · GHSA-cm4r-mgm8-xjxv

Missing authorization in wowdevs Sky Addons – Elementor Addons with Widgets & Templates

LOW 35

The Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blog, Video Gallery) plugin for WordPress is vulnerable to Cross-Site Request Forgery in a…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00349 Published 2024-11-22 No fix listed CWE-862

TI-2024-10289 CVE-2024-11104 · GHSA-wx82-66wj-jh77

Missing authorization in wowdevs Sky Addons – Elementor Addons with Widgets & Templates

LOW 36

The Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) plugin for WordPress is vulnerable to unauthorized modification of data that can le…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.007 Published 2024-11-22 No fix listed CWE-862

TI-2024-08852 CVE-2024-9542 · GHSA-c2vg-7h9p-v54r

Information disclosure in wowdevs Sky Addons – Elementor Addons with Widgets & Templates

LOW 20

The Sky Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.1 via the render function in modules/content-switcher/widgets/content-switcher.p…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00308 Published 2024-11-21 No fix listed CWE-200

TI-2024-33866 CVE-2024-50433 · GHSA-6qxw-gg6f-98p3

WordPress Sky Addons for Elementor plugin <= 2.5.15 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wowDevs Sky Addons for Elementor sky-elementor-addons allows Cross-Site Scripting (XSS).This issue affects Sky Addons…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00277 Published 2024-10-28 No fix listed CWE-79

TI-2024-31650 CVE-2024-47332 · GHSA-2g6x-pxrf-x3gx

WordPress Sky Addons for Elementor plugin <= 2.5.11 - Cross Site Scripting (XSS) vulnerability

LOW 29

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00277 Published 2024-10-06 No fix listed CWE-79

TI-2024-25922 CVE-2024-38687 · GHSA-wqw5-3mgq-446w

WordPress Sky Addons for Elementor plugin <= 2.5.5 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wowDevs Sky Addons for Elementor sky-elementor-addons.This issue affects Sky Addons for Elementor: from n/a through <=…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0032 Published 2024-07-20 No fix listed CWE-79

TI-2024-02123 CVE-2024-2286 · GHSA-pv4x-5wmj-f287

Sky Addons for Elementor <= 2.4.0 - Authenticated(Contributor+) Stored Cross-site scripting via Wrapper Link URL

LOW 29

The Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wrapper link URL…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00423 Published 2024-03-13 No fix listed CWE-79

Vulnerabilities

Filters