Elfsight vulnerabilities

Products

• Testimonials Slider 3
• Pricing Table 2

Newest

• elfsight whatsapp chat cc WordPress Elfsight WhatsApp Chat CC plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-39696 6.5 MediumApril 8, 2026
• elfsight contact form widget WordPress elfsight Contact Form widget plugin <= 2.3.1 - Sensitive Data Exposure Vulnerability CVE-2025-31045 7.5 HighJune 9, 2025
• elfsight testimonials slider WordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability CVE-2025-31588 5.4 MediumMarch 31, 2025
• elfsight testimonials slider WordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-31587 5.9 MediumMarch 31, 2025
• elfsight testimonials slider WordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Broken Access Control vulnerability CVE-2025-31584 5.4 MediumMarch 31, 2025
• elfsight yottie lite WordPress Elfsight Yottie Lite Plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability CVE-2025-26561 5.9 MediumFebruary 13, 2025
• elfsight telegram chat cc Elfsight Telegram Chat CC <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2024-10390 6.4 MediumNovember 18, 2024
• elfsight pricing table Pricing Table <= 2.0.1 - Missing Authorization CVE-2024-4102 5.4 MediumJuly 9, 2024
• elfsight pricing table Pricing Table <= 2.0.1 - Cross-Site Request Forgery via ajax() CVE-2024-4100 5.3 MediumJuly 9, 2024
• elfsight instalinker The instalinker plugin before 1.1.2 for WordPress has includes/instalinker-admin-preview.php... CVE-2016-11005 6.1 MediumSeptember 20, 2019