Duongancol vulnerabilities

Products

• Boostify Header Footer Builder For Elementor 3
• Woostify 2

Newest

• duongancol woostify Woostify <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lity.js Library via data-lity Attribute in Custom HTML Block CVE-2026-4805 6.4 MediumApril 28, 2026
• duongancol woostify WordPress Woostify Theme <= 2.4.2 - Cross Site Scripting (XSS) Vulnerability CVE-2025-60101 5.9 MediumSeptember 26, 2025
• duongancol boostify header footer builder for elementor Boostify Header Footer Builder for Elementor <= 1.3.6 - Authenticated (Contributor+) Post Disclosure CVE-2024-10794 4.3 MediumNovember 13, 2024
• duongancol boostify header footer builder for elementor Boostify Header Footer Builder for Elementor <= 1.3.5 - Missing Authorization to Page/Post Creation CVE-2024-4788 4.3 MediumJune 6, 2024
• duongancol boostify header footer builder for elementor Boostify Header Footer Builder for Elementor <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via size Parameter CVE-2024-5006 6.4 MediumJune 5, 2024