Nalam-1 vulnerabilities

Newest

• nalam-1 ai marketing expert — ai email marketing, ai content generator, seo analyzer, ai workflow automation, social media & ai chatbot AI Marketing Expert <= 1.2.8 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'name' Parameter CVE-2026-109999 7.2 HighOctober 28, 2026
• nalam-1 magical posts display – elementor advanced posts widgets Magical Posts Display <= 1.2.54 - Authenticated (Author+) Stored Cross-Site Scripting via Magical Posts Accordion Widget CVE-2025-12965 6.4 MediumDecember 12, 2025
• nalam-1 magical shop builder – woocommerce template builder for elementor | shop, cart, checkout & product page builder Magical Products Display <= 1.1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via MPD Pricing Table Widget CVE-2025-12964 6.4 MediumNovember 21, 2025
• nalam-1 magical addons for elementor ( header footer builder, free elementor widgets, elementor templates library ) Magical Addons For Elementor <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes CVE-2025-8196 6.4 MediumJuly 29, 2025
• wpthemespace magical addons for elementor, nalam-1 magical addons for elementor ( header footer builder, free elementor widgets, elementor templates library ) +1 more Magical Addons For Elementor <= 1.2.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template CVE-2024-10352 4.3 MediumNovember 9, 2024
• nalam-1 magical addons for elementor ( header footer builder, free elementor widgets, elementor templates library ), wpthemespace magical addons for elementor +1 more Magical Addons For Elementor <= 1.1.39 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-5161 6.4 MediumJune 6, 2024
• nalam-1 magical addons for elementor ( header footer builder, free elementor widgets, elementor templates library ), wpthemespace magical addons for elementor +1 more Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) <= 1.1.37 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Effect Widget CVE-2024-2923 6.4 MediumMay 9, 2024