CVE-2025-32192 |
WordPress Ultra Addons Lite for Elementor plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UltraPress Ultra Addons Lite for Elementor allows Stored XSS. This issue affects Ultra Addons Lite for Elementor: from n/a through 1.1.8.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 4th, 2025 (16 days ago)
|
CVE-2025-32191 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webangon News Element Elementor Blog Magazine allows DOM-Based XSS. This issue affects News Element Elementor Blog Magazine: from n/a through 1.0.7.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 4th, 2025 (16 days ago)
|
CVE-2025-32190 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in smartwpress Musician's Pack for Elementor allows DOM-Based XSS. This issue affects Musician's Pack for Elementor: from n/a through 1.8.4.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 4th, 2025 (16 days ago)
|
CVE-2025-32189 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Best WP Developer BWD Elementor Addons allows DOM-Based XSS. This issue affects BWD Elementor Addons: from n/a through 4.3.20.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 4th, 2025 (16 days ago)
|
CVE-2025-32188 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ILLID Advanced Woo Labels allows Stored XSS. This issue affects Advanced Woo Labels: from n/a through 2.14.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 4th, 2025 (16 days ago)
|
CVE-2025-32187 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Quý Lê 91 Administrator Z allows DOM-Based XSS. This issue affects Administrator Z: from n/a through 2025.03.04.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 4th, 2025 (16 days ago)
|
CVE-2025-32186 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Turbo Addons Turbo Addons for Elementor allows DOM-Based XSS. This issue affects Turbo Addons for Elementor: from n/a through 1.7.1.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 4th, 2025 (16 days ago)
|
CVE-2025-32185 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder allows Stored XSS. This issue affects Colibri Page Builder: from n/a through 1.0.319.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 4th, 2025 (16 days ago)
|
CVE-2025-32184 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bdthemes Ultimate Store Kit Elementor Addons allows Stored XSS. This issue affects Ultimate Store Kit Elementor Addons: from n/a through 2.4.0.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 4th, 2025 (16 days ago)
|
CVE-2025-32183 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Galaxy Weblinks Video Playlist For YouTube allows Stored XSS. This issue affects Video Playlist For YouTube: from n/a through 6.6.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 4th, 2025 (16 days ago)
|