{"items":[{"id":"CVE-2025-5290","published":"2025-05-31T07:22:11.704Z","updated":"2026-04-08T16:49:24.653Z","title":"Borderless – Elementor Addons and Templates <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"visualmodo","product":"Borderless – Addons and Templates for Elementor","kev":false,"epss":0.00311,"kevAdded":null,"exploit":false},{"id":"CVE-2024-10867","published":"2025-01-31T04:21:47.505Z","updated":"2026-04-08T17:05:18.467Z","title":"Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg <= 1.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload","severity":"MEDIUM","score":5.4,"vendor":"visualmodo","product":"Borderless – Addons and Templates for Elementor","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2024-11600","published":"2025-01-30T13:41:59.249Z","updated":"2026-04-08T16:57:30.384Z","title":"Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg <= 1.6.0 - Authenticated (Administrator+) Remote Code Execution","severity":"HIGH","score":7.2,"vendor":"visualmodo","product":"Borderless – Addons and Templates for Elementor","kev":false,"epss":0.01336,"kevAdded":null,"exploit":false},{"id":"CVE-2024-11583","published":"2025-01-30T13:41:55.042Z","updated":"2026-04-08T16:34:29.111Z","title":"Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg <= 1.5.9 - Missing Authorization to Icon Font Deletion","severity":"MEDIUM","score":4.3,"vendor":"visualmodo","product":"Borderless – Addons and Templates for Elementor","kev":false,"epss":0.00387,"kevAdded":null,"exploit":false},{"id":"CVE-2024-11095","published":"2024-12-14T04:23:41.955Z","updated":"2026-04-08T16:50:22.713Z","title":"Visualmodo Elements <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload","severity":"MEDIUM","score":6.4,"vendor":"visualmodo","product":"Visualmodo Elements","kev":false,"epss":0.00301,"kevAdded":null,"exploit":false},{"id":"CVE-2024-54211","published":"2024-12-06T13:07:27.193Z","updated":"2026-04-28T16:10:47.147Z","title":"WordPress Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin <= 1.5.8 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":5.9,"vendor":"Visualmodo","product":"Borderless","kev":false,"epss":0.00268,"kevAdded":null,"exploit":false},{"id":"CVE-2024-34757","published":"2024-05-17T05:59:00.934Z","updated":"2026-05-11T21:00:50.873Z","title":"WordPress Borderless plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Visualmodo","product":"Borderless","kev":false,"epss":0.00257,"kevAdded":null,"exploit":false},{"id":"CVE-2024-4666","published":"2024-05-14T22:31:37.961Z","updated":"2026-04-08T17:17:27.456Z","title":"Borderless - Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets","severity":"MEDIUM","score":6.4,"vendor":"visualmodo","product":"Borderless – Addons and Templates for Elementor","kev":false,"epss":0.0041,"kevAdded":null,"exploit":false},{"id":"CVE-2023-38518","published":"2023-09-03T11:16:54.922Z","updated":"2026-04-28T16:08:34.276Z","title":"WordPress Borderless Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS)","severity":"MEDIUM","score":5.9,"vendor":"Visualmodo","product":"Borderless","kev":false,"epss":0.00369,"kevAdded":null,"exploit":false}]}