Wpdevteam vulnerabilities

Products

• Essential Addons For Elementor – Popular Elementor Templates & Widgets 50
• Gutenberg Essential Blocks – Page Builder For Gutenberg Blocks & Patterns 23
• Embedpress – Pdf Embedder, Embed Youtube Videos, 3d Flipbook, Social Feeds, Docs & More 17
• Betterdocs – Knowledge Base Docs & Faq Solution For Elementor & Block Editor 5
• Betterdocs – Ai Documentation, Knowledge Base, Docs, Wikis, Faq With Chatbot 2
• Easy.jobs – Ai Powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution 2
• Essential Blocks Pro 2
• Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! 2

Newest

• wpdevteam easy.jobs – ai powered job listing, job board, career page, recruitment & hiring solution easy.jobs <= 2.8.4 - Unauthenticated Stored Cross-Site Scripting via 'cover_letter' Parameter CVE-2026-112365 7.2 HighOctober 30, 2026
• wpdevteam essential addons for elementor – popular elementor templates & widgets Essential Addons for Elementor <= 6.8.7 - Unauthenticated Privilege Escalation to 'page_id' Parameter via Elementor Revision CVE-2026-118205 7.4 HighOctober 30, 2026
• wpdevteam easy.jobs – ai powered job listing, job board, career page, recruitment & hiring solution easy.jobs <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Block Attribute CVE-2026-108366 6.4 MediumOctober 28, 2026
• wpdevteam xspeed cache: ai-powered performance hub with mcp, caching & cdn xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_content' Parameter CVE-2026-109985 6.4 MediumOctober 17, 2026
• wpdevteam notificationx – fomo, live sales notification, woocommerce sales popup, gdpr, social proof, announcement banner & floating notification bar NotificationX <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via 'name' Parameter via popup-submit REST Route CVE-2026-109513 7.2 HighOctober 16, 2026
• wpdevteam notificationx – fomo, live sales notification, woocommerce sales popup, gdpr, social proof, announcement banner & floating notification bar NotificationX <= 3.3.3 - Missing Authorization to Unauthenticated Arbitrary Content Injection via 'nx_id' Parameter on /popup-submit REST Route CVE-2026-110721 5.3 MediumOctober 16, 2026
• wpdevteam embedpress – pdf embedder, 3d pdf flipbook, google reviews, youtube videos, upload & embed pdf documents EmbedPress <= 4.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slidesShow' Block Attribute CVE-2026-92727 6.4 MediumOctober 3, 2026
• wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attribute CVE-2026-96256 6.4 MediumOctober 1, 2026
• wpdevteam embedpress – pdf embedder, 3d pdf flipbook, google reviews, youtube videos, upload & embed pdf documents EmbedPress <= 4.6.5 - Reflected Cross-Site Scripting via 'hash' and 'unique' Parameters CVE-2026-89330 6.1 MediumSeptember 18, 2026
• wpdevteam betterdocs – ai documentation, knowledge base, mcp server, docs, wikis, faq & chatbot BetterDocs <= 4.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading 'id' Attribute in Post Content CVE-2026-75980 6.4 MediumSeptember 1, 2026
• wpdevteam betterlinks – link shortener, link cloaking, redirects, affiliate link manager & mcp BetterLinks <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Short URL Creation via create_fbs_link AJAX Action CVE-2026-19801 4.3 MediumAugust 25, 2026
• wpdevteam templately – elementor & gutenberg template library: 6500+ free & pro ready templates and cloud! Templately <= 3.7.1 - Authenticated (Contributor+) Arbitrary File Upload to Remote Code Execution via Gutenberg Cloud Import Attachment Filename Mismatch CVE-2026-18438 8.8 HighAugust 15, 2026
• wpdevteam essential addons for elementor – popular elementor templates & widgets Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget CVE-2026-15145 6.4 MediumJuly 21, 2026
• wpdevteam essential addons for elementor – popular elementor templates & widgets Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reading Progress Global Color Settings CVE-2026-15156 6.4 MediumJuly 21, 2026
• wpdevteam essential addons for elementor – popular elementor templates & widgets Essential Addons for Elementor <= 6.6.10 - Authenticated (Contributor+) Account Takeover via Email Header Injection CVE-2026-15155 8.8 HighJuly 11, 2026
• wpdevteam betterdocs – ai documentation, knowledge base, docs, wikis, faq with chatbot BetterDocs <= 4.6.0 - Authenticated (Custom+) SQL Injection via 'lang' Parameter CVE-2026-15104 6.5 MediumJuly 10, 2026
• wpdevteam essential addons for elementor – popular elementor templates & widgets Essential Addons for Elementor <= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget Popup CVE-2026-6459 6.4 MediumJuly 8, 2026
• wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurablePrefix' Block Attribute CVE-2026-10833 6.4 MediumJune 25, 2026
• wpdevteam betterdocs – ai documentation, knowledge base, docs, wikis, faq with chatbot BetterDocs <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'blockId' Block Attribute CVE-2026-12157 6.4 MediumJune 19, 2026
• wpdevteam embedpress – pdf embedder, embed pdf viewer, youtube videos, 3d flipbook, social feeds & more EmbedPress <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block 'url' Attribute CVE-2026-7796 6.4 MediumJune 6, 2026
• wpdevteam essential addons for elementor – popular elementor templates & widgets Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler CVE-2026-7665 Public exploit 5.3 MediumJune 6, 2026
• wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 6.1.3 - Authenticated (Author+) Server-Side Request Forgery CVE-2026-10586 7.2 HighJune 4, 2026
• wpdevteam essential addons for elementor – popular elementor templates & widgets Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_user CVE-2026-5193 6.5 MediumMay 14, 2026
• wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes CVE-2026-4658 6.4 MediumMay 2, 2026
• wpdevteam betterdocs – knowledge base docs & faq solution for elementor & block editor BetterDocs <= 4.3.11 - Missing Authorization to Authenticated (Subscriber+) Unauthorized AI API Usage CVE-2026-6393 4.3 MediumApril 24, 2026
• wpdevteam betterdocs – knowledge base docs & faq solution for elementor & block editor BetterDocs <= 4.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes CVE-2026-3875 6.4 MediumApril 16, 2026
• wpdevteam essential addons for elementor – popular elementor templates & widgets Essential Addons for Elementor <= 6.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Box Widget CVE-2026-1512 6.4 MediumFebruary 14, 2026
• wpdevteam notificationx – fomo, live sales notification, woocommerce sales popup, gdpr, social proof, announcement banner & floating notification bar NotificationX <= 3.1.11 - Missing Authorization to Authenticated (Contributor+) Analytics Reset CVE-2026-0554 4.3 MediumJanuary 20, 2026
• wpdevteam notificationx – fomo, live sales notification, woocommerce sales popup, gdpr, social proof, announcement banner & floating notification bar NotificationX <= 3.2.0 - Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview' CVE-2025-15380 7.2 HighJanuary 20, 2026
• wpdevteam essential addons for elementor – popular elementor templates & widgets Essential Addons for Elementor <= 6.5.5 - Missing Authorization to Unauthenticated Sensitive Information Exposure CVE-2026-1004 5.3 MediumJanuary 16, 2026
• wpdevteam templately – elementor & gutenberg template library: 6500+ free & pro ready templates and cloud! Templately <= 3.4.8 - Unauthenticated Limited Arbitrary JSON File Write CVE-2026-0831 5.3 MediumJanuary 10, 2026
• wpdevteam betterdocs – knowledge base docs & faq solution for elementor & block editor BetterDocs <= 4.3.3 - Authenticated (Contributor+) Sensitive Information Exposure CVE-2025-14980 6.5 MediumJanuary 9, 2026
• wpdevteam essential addons for elementor – popular elementor templates & widgets Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-13977 6.4 MediumDecember 17, 2025
• wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns Essential Blocks <= 5.7.2 - Missing Authorization To Authenticated (Author+) Information Disclosure CVE-2025-11369 4.3 MediumDecember 17, 2025
• wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-11270 6.4 MediumOctober 18, 2025
• wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgery CVE-2025-11361 6.4 MediumOctober 18, 2025
• wpdevteam betterdocs – knowledge base docs & faq solution for elementor & block editor BetterDocs <= 4.1.1 - Missing Authorization to Private And Password-Protected Posts Information Disclosure CVE-2025-7499 5.3 MediumAugust 16, 2025
• wpdevteam essential addons for elementor – popular elementor templates & widgets Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items' CVE-2025-8451 6.4 MediumAugust 15, 2025
• wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 more Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Calendar` And `Business Reviews` Widgets CVE-2025-6244 6.4 MediumJuly 8, 2025
• badhonrocks divi torque lite, blossomthemes social feed, boldthemes bold page builder +12 more +14 more Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library CVE-2024-5647 6.4 MediumJuly 3, 2025
• wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 more Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widget CVE-2024-9993 6.4 MediumJune 7, 2025
• wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 more Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widget CVE-2024-9994 6.4 MediumJune 7, 2025
• wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider and Post Carousel Widgets CVE-2025-4682 6.4 MediumMay 27, 2025
• wpdeveloper essential blocks, wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns +1 more Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-1664 6.4 MediumMarch 8, 2025
• wpdeveloper essential blocks, wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns +1 more Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-13803 6.4 MediumFebruary 26, 2025
• wpdeveloper essential blocks, wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns +1 more Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-12045 4.4 MediumJanuary 8, 2025
• wpdevteam notificationx – fomo, live sales notification, woocommerce sales popup, gdpr, social proof, announcement banner & floating notification bar NotificationX – Live Sales Notification, WooCommerce Sales Popup, FOMO, Social Proof, Announcement Banner & Floating Notification Top Bar <= 2.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-11727 4.4 MediumDecember 12, 2024
• wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 more EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps in Gutenberg Block & Elementor <= 4.1.3 - Authenticated (Contributor+) Stored Cross-S… CVE-2024-11203 6.4 MediumNovember 28, 2024
• wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 more Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation CVE-2024-8979 8.0 HighNovember 15, 2024
• wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 more Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure CVE-2024-8978 5.7 MediumNovember 15, 2024
• Show olderLoading…