Veille CVE

Recherche « Xpro Elementor Addons »

3 CVE

Critique 0 Élevée 1 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Xpro Elementor Addons » ✕
  1. CVE-2026-114177 8.8 Élevée

    Xpro Elementor Addons

    Cross-Site Request Forgery (CSRF) vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Cross Site Request Forgery.This issue affects Xpro Elementor Addons: from n/a through 1.7.10.

  2. CVE-2026-84088 6.8 Moyenne

    Unknown Xpro Addons — 140+ Widgets for Elementor

    The Xpro Addons — 140+ Widgets for Elementor WordPress plugin before 1.7.9 does not validate or sanitize a widget link setting before storing and using it in a JavaScript navigation call, allowing users with the contributor role and above to inject and store JavaScript that executes in the browser of anyone who interacts with the affected widget.

  3. CVE-2026-84146 5.3 Moyenne

    Unknown Xpro Addons — 140+ Widgets for Elementor

    The Xpro Addons — 140+ Widgets for Elementor WordPress plugin before 1.7.8 does not perform any capability or post-status check before rendering a WooCommerce product summary from a supplied product identifier, allowing unauthenticated visitors to retrieve the title, price, SKU, description and stock details of products that are not publicly published (draft, pending, private or scheduled status).