CVE-2026-39703
- EPSS 0.13%
- Veröffentlicht 08.04.2026 08:30:47
- Zuletzt bearbeitet 24.04.2026 18:05:35
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbits WPBITS Addons For Elementor Page Builder wpbits-addons-for-elementor allows Stored XSS.This issue affects WPBITS Addons For Elementor Page Bu...
CVE-2025-9082
- EPSS 0.27%
- Veröffentlicht 28.01.2026 06:43:43
- Zuletzt bearbeitet 15.04.2026 00:35:42
The WPBITS Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget parameters in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping when dynamic content is ...
CVE-2024-37945
- EPSS 0.16%
- Veröffentlicht 14.08.2025 17:15:51
- Zuletzt bearbeitet 23.04.2026 15:18:44
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbits WPBITS Addons For Elementor Page Builder wpbits-addons-for-elementor allows Stored XSS.This issue affects WPBITS Addons For Elementor Page Bu...
CVE-2025-22316
- EPSS 0.28%
- Veröffentlicht 07.01.2025 11:15:15
- Zuletzt bearbeitet 23.04.2026 15:23:00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbits WPBITS Addons For Elementor Page Builder wpbits-addons-for-elementor allows Stored XSS.This issue affects WPBITS Addons For Elementor Page Bu...
CVE-2024-56285
- EPSS 0.29%
- Veröffentlicht 07.01.2025 11:15:10
- Zuletzt bearbeitet 23.04.2026 15:22:46
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbits WPBITS Addons For Elementor Page Builder wpbits-addons-for-elementor allows Stored XSS.This issue affects WPBITS Addons For Elementor Page Bu...
CVE-2024-8962
- EPSS 0.29%
- Veröffentlicht 04.12.2024 12:15:20
- Zuletzt bearbeitet 27.02.2025 20:54:25
The WPBITS Addons For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it ...
CVE-2024-4862
- EPSS 0.5%
- Veröffentlicht 09.07.2024 11:15:15
- Zuletzt bearbeitet 08.04.2026 18:21:56
The WPBITS Addons For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 1.5 due to insufficient input sanitization and output escaping on user supplied a...
CVE-2024-32593
- EPSS 0.34%
- Veröffentlicht 18.04.2024 09:15:13
- Zuletzt bearbeitet 28.04.2026 19:24:50
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPBits WPBITS Addons For Elementor Page Builder allows Stored XSS.This issue affects WPBITS Addons For Elementor Page Builder: from n/a through 1.3....
CVE-2024-2129
- EPSS 0.45%
- Veröffentlicht 20.03.2024 07:15:11
- Zuletzt bearbeitet 08.04.2026 17:18:30
The WPBITS Addons For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's heading widget in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping on use...