Veille CVE

Recherche « Unknown Sina Extension for Elementor »

2 CVE

  1. CVE-2026-83541 6.8 Moyenne

    Unknown Sina Extension for Elementor

    The Sina Extension for Elementor WordPress plugin before 3.10.4 does not properly escape a Table widget setting before outputting it within an HTML attribute, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.

  2. CVE-2026-14190 6.1 Moyenne

    Unknown Sina Extension for Elementor

    The Sina Extension for Elementor WordPress plugin before 3.10.2 does not escape a value reconstructed from request input in one of its unauthenticated AJAX handlers before reflecting it into the HTML response, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who triggers a crafted request.