{"items":[{"id":"CVE-2026-119507","published":"2026-11-07T09:32:03.635Z","updated":"2026-11-09T22:42:16.643Z","title":"WordPress NotificationX plugin <= 3.3.6 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPDeveloper","product":"NotificationX","kev":false,"epss":0.00311,"kevAdded":null,"exploit":false},{"id":"CVE-2022-51021","published":"2026-10-22T10:57:32.517Z","updated":"2026-10-23T21:15:37.175Z","title":"NotificationX WordPress Plugin < 2.3.12 Unauthenticated SQL Injection via notification REST endpoint","severity":"HIGH","score":8.8,"vendor":"WPDeveloper","product":"NotificationX","kev":false,"epss":0.00461,"kevAdded":null,"exploit":false},{"id":"CVE-2026-114120","published":"2026-10-21T12:39:43.243Z","updated":"2026-10-21T13:38:20.150Z","title":"SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX Action","severity":"MEDIUM","score":5.3,"vendor":"WPDeveloper","product":"SchedulePress","kev":false,"epss":0.00286,"kevAdded":null,"exploit":false},{"id":"CVE-2026-110898","published":"2026-10-19T09:09:19.416Z","updated":"2026-10-19T16:50:35.254Z","title":"WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability","severity":"MEDIUM","score":6.4,"vendor":"WPDeveloper","product":"Essential Addons for Elementor","kev":false,"epss":0.00208,"kevAdded":null,"exploit":false},{"id":"CVE-2026-102394","published":"2026-10-01T12:35:39.808Z","updated":"2026-10-01T13:10:48.460Z","title":"WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"Essential Addons for Elementor","kev":false,"epss":0.00127,"kevAdded":null,"exploit":false},{"id":"CVE-2026-81777","published":"2026-08-28T09:42:11.752Z","updated":"2026-08-28T15:28:16.134Z","title":"WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPDeveloper","product":"Essential Addons for Elementor","kev":false,"epss":0.00405,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66667","published":"2026-08-18T13:59:55.063Z","updated":"2026-08-18T15:03:18.743Z","title":"WordPress Templately plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"WPDeveloper","product":"Templately","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66645","published":"2026-08-18T13:59:51.492Z","updated":"2026-08-18T14:27:51.121Z","title":"WordPress Table Of Contents Block plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"Table Of Contents Block","kev":false,"epss":0.00224,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61961","published":"2026-08-06T14:27:19.936Z","updated":"2026-08-06T14:48:10.314Z","title":"WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"WPDeveloper","product":"EmbedPress","kev":false,"epss":0.00251,"kevAdded":null,"exploit":false},{"id":"CVE-2026-65562","published":"2026-07-27T13:59:21.316Z","updated":"2026-07-27T14:59:56.545Z","title":"WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"BetterDocs","kev":false,"epss":0.00224,"kevAdded":null,"exploit":false},{"id":"CVE-2026-57364","published":"2026-07-13T08:41:23.764Z","updated":"2026-07-13T13:48:17.465Z","title":"WordPress Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More plugin <= 2.2.0 - Other Vulnerability Type vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"Better Payment – Instant Payments, Donations, Fundraising with Subscriptions &amp; More","kev":false,"epss":0.00351,"kevAdded":null,"exploit":false},{"id":"CVE-2026-48872","published":"2026-06-15T20:18:58.122Z","updated":"2026-06-16T13:43:23.879Z","title":"WordPress EmbedPress plugin <= 4.5.2 - Sensitive Data Exposure vulnerability","severity":"HIGH","score":7.5,"vendor":"WPDeveloper","product":"EmbedPress","kev":false,"epss":0.00346,"kevAdded":null,"exploit":false},{"id":"CVE-2026-25440","published":"2026-06-15T20:17:32.855Z","updated":"2026-06-16T14:54:00.518Z","title":"WordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPDeveloper","product":"Essential Addons for Elementor","kev":false,"epss":0.00214,"kevAdded":null,"exploit":false},{"id":"CVE-2026-42644","published":"2026-04-29T10:40:45.882Z","updated":"2026-05-12T11:03:21.815Z","title":"WordPress BetterDocs plugin <= 4.3.10 - Sensitive Data Exposure vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPDeveloper","product":"BetterDocs","kev":false,"epss":0.00247,"kevAdded":null,"exploit":false},{"id":"CVE-2026-42379","published":"2026-04-27T08:26:37.727Z","updated":"2026-04-27T10:31:24.329Z","title":"WordPress Templately plugin <= 3.6.1 - Sensitive Data Exposure vulnerability","severity":"HIGH","score":7.7,"vendor":"WPDeveloper","product":"Templately","kev":false,"epss":0.00212,"kevAdded":null,"exploit":false},{"id":"CVE-2026-27042","published":"2026-02-19T08:27:09.364Z","updated":"2026-04-28T16:14:59.685Z","title":"WordPress NotificationX plugin <= 3.2.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPDeveloper","product":"NotificationX","kev":false,"epss":0.00204,"kevAdded":null,"exploit":false},{"id":"CVE-2026-23543","published":"2026-02-19T08:26:48.831Z","updated":"2026-04-28T16:14:46.698Z","title":"WordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPDeveloper","product":"Essential Addons for Elementor","kev":false,"epss":0.00264,"kevAdded":null,"exploit":false},{"id":"CVE-2025-69092","published":"2025-12-30T10:47:58.488Z","updated":"2026-04-28T20:42:17.147Z","title":"WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"Essential Addons for Elementor","kev":false,"epss":0.00154,"kevAdded":null,"exploit":false},{"id":"CVE-2025-64352","published":"2025-10-31T11:42:23.045Z","updated":"2026-04-28T16:14:14.117Z","title":"WordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerability","severity":"LOW","score":2.7,"vendor":"WPDeveloper","product":"Essential Addons for Elementor","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2025-49408","published":"2025-08-20T08:03:48.674Z","updated":"2026-04-28T16:13:04.127Z","title":"WordPress Templately Plugin <= 3.2.7 - Sensitive Data Exposure Vulnerability","severity":"CRITICAL","score":10,"vendor":"WPDeveloper","product":"Templately","kev":false,"epss":0.00538,"kevAdded":null,"exploit":false},{"id":"CVE-2025-24752","published":"2025-04-17T15:48:11.325Z","updated":"2026-04-28T16:11:33.944Z","title":"WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"WPDeveloper","product":"Essential Addons for Elementor","kev":false,"epss":0.01257,"kevAdded":null,"exploit":false},{"id":"CVE-2025-39589","published":"2025-04-16T12:44:21.605Z","updated":"2026-04-28T16:12:35.200Z","title":"WordPress Essential Addons for Elementor plugin <= 6.1.9 - Sensitive Data Exposure Vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WPDeveloper","product":"Essential Addons for Elementor","kev":false,"epss":0.00433,"kevAdded":null,"exploit":false},{"id":"CVE-2025-39590","published":"2025-04-16T12:44:20.971Z","updated":"2026-04-28T16:12:35.220Z","title":"WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) Vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"Essential Addons for Elementor","kev":false,"epss":0.00334,"kevAdded":null,"exploit":false},{"id":"CVE-2025-25086","published":"2025-03-27T14:08:54.345Z","updated":"2026-04-28T16:11:34.909Z","title":"WordPress Secret Meta plugin <= 1.2.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"WPDeveloper","product":"Secret Meta","kev":false,"epss":0.00142,"kevAdded":null,"exploit":false},{"id":"CVE-2025-26871","published":"2025-02-25T14:17:50.925Z","updated":"2026-04-28T16:11:41.189Z","title":"WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WPDeveloper","product":"Essential Blocks for Gutenberg","kev":false,"epss":0.00406,"kevAdded":null,"exploit":false},{"id":"CVE-2025-22696","published":"2025-02-04T14:21:13.762Z","updated":"2026-04-28T16:11:04.834Z","title":"WordPress Document Block – Upload & Embed Docs, PDF, PPT, XLS or Any Documents plugin <= 1.1.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"WPDeveloper","product":"Document Block – Upload & Embed Docs","kev":false,"epss":0.0029,"kevAdded":null,"exploit":false},{"id":"CVE-2025-22683","published":"2025-02-03T14:23:51.434Z","updated":"2026-04-28T16:11:04.334Z","title":"WordPress NotificationX plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"NotificationX","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2025-22315","published":"2025-01-07T10:48:54.174Z","updated":"2026-04-28T16:10:59.226Z","title":"WordPress Typing Text plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"Typing Text","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2023-45104","published":"2025-01-02T11:59:49.780Z","updated":"2026-04-29T09:51:48.944Z","title":"WordPress BetterLinks plugin <= 1.6.0 - Broken Access Control vulnerability","severity":"HIGH","score":7.3,"vendor":"WPDeveloper","product":"BetterLinks","kev":false,"epss":0.00457,"kevAdded":null,"exploit":false},{"id":"CVE-2024-56063","published":"2024-12-31T23:06:31.011Z","updated":"2026-04-28T16:10:54.741Z","title":"WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"Essential Addons for Elementor","kev":false,"epss":0.00255,"kevAdded":null,"exploit":false},{"id":"CVE-2022-47594","published":"2024-12-13T14:22:12.225Z","updated":"2026-04-28T16:07:58.067Z","title":"WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access Control","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"Essential Blocks for Gutenberg","kev":false,"epss":0.0043,"kevAdded":null,"exploit":false},{"id":"CVE-2023-47760","published":"2024-12-09T11:30:51.617Z","updated":"2026-04-29T09:51:51.111Z","title":"WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WPDeveloper","product":"Essential Blocks for Gutenberg","kev":false,"epss":0.00399,"kevAdded":null,"exploit":false},{"id":"CVE-2023-47761","published":"2024-12-09T11:30:50.790Z","updated":"2026-04-29T09:51:51.204Z","title":"WordPress Simple 301 Redirects by BetterLinks plugin <= 2.0.7 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WPDeveloper","product":"Simple 301 Redirects by BetterLinks","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2023-47762","published":"2024-12-09T11:30:49.970Z","updated":"2026-04-29T09:51:51.251Z","title":"WordPress BetterDocs plugin <= 2.5.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WPDeveloper","product":"BetterDocs","kev":false,"epss":0.00337,"kevAdded":null,"exploit":false},{"id":"CVE-2023-51360","published":"2024-12-09T11:29:48.540Z","updated":"2026-04-29T09:51:52.548Z","title":"WordPress Essential Blocks plugin <= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"Essential Blocks for Gutenberg","kev":false,"epss":0.00581,"kevAdded":null,"exploit":false},{"id":"CVE-2023-51359","published":"2024-12-09T11:29:47.741Z","updated":"2026-04-29T09:51:52.514Z","title":"WordPress Essential Blocks plugin <= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"WPDeveloper","product":"Essential Blocks for Gutenberg","kev":false,"epss":0.00591,"kevAdded":null,"exploit":false},{"id":"CVE-2024-51672","published":"2024-11-04T14:08:31.523Z","updated":"2026-05-11T21:38:14.583Z","title":"WordPress BetterLinks plugin <= 2.1.7 - SQL Injection vulnerability","severity":"HIGH","score":7.6,"vendor":"WPDeveloper","product":"BetterLinks","kev":false,"epss":0.00465,"kevAdded":null,"exploit":false},{"id":"CVE-2024-38707","published":"2024-11-01T14:18:07.439Z","updated":"2026-04-28T16:10:05.020Z","title":"WordPress EmbedPress plugin <= 4.0.4 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.3,"vendor":"WPDeveloper","product":"EmbedPress","kev":false,"epss":0.0042,"kevAdded":null,"exploit":false},{"id":"CVE-2024-47308","published":"2024-11-01T14:17:06.698Z","updated":"2026-04-28T16:10:18.323Z","title":"WordPress Templately plugin <= 3.1.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"Templately","kev":false,"epss":0.01744,"kevAdded":null,"exploit":true},{"id":"CVE-2024-50423","published":"2024-10-29T21:26:19.813Z","updated":"2026-05-11T21:30:00.274Z","title":"WordPress Templately plugin <= 3.1.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"WPDeveloper","product":"Templately","kev":false,"epss":0.00387,"kevAdded":null,"exploit":false},{"id":"CVE-2024-50424","published":"2024-10-29T21:24:34.238Z","updated":"2026-05-12T23:02:57.235Z","title":"WordPress Templately plugin <= 3.1.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"Templately","kev":false,"epss":0.00378,"kevAdded":null,"exploit":false},{"id":"CVE-2024-50461","published":"2024-10-28T17:48:55.189Z","updated":"2026-05-11T21:24:38.299Z","title":"WordPress EmbedPress plugin <= 4.0.14 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"EmbedPress","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2024-47385","published":"2024-10-05T14:51:56.136Z","updated":"2026-04-28T16:10:20.039Z","title":"WordPress Essential Blocks plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"Essential Blocks for Gutenberg","kev":false,"epss":0.00261,"kevAdded":null,"exploit":false},{"id":"CVE-2024-43936","published":"2024-08-29T18:07:24.934Z","updated":"2026-04-28T16:10:13.934Z","title":"WordPress EmbedPress plugin <= 4.0.8 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"EmbedPress","kev":false,"epss":0.00295,"kevAdded":null,"exploit":false},{"id":"CVE-2024-43328","published":"2024-08-19T19:26:35.332Z","updated":"2026-04-28T16:10:12.937Z","title":"WordPress EmbedPress plugin <= 4.0.9 - Local File Inclusion vulnerability","severity":"HIGH","score":8.3,"vendor":"WPDeveloper","product":"EmbedPress","kev":false,"epss":0.00498,"kevAdded":null,"exploit":false},{"id":"CVE-2024-43129","published":"2024-08-13T10:54:06.386Z","updated":"2026-04-28T16:10:09.016Z","title":"WordPress BetterDocs plugin <= 3.5.8 - Local File Inclusion vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"BetterDocs","kev":false,"epss":0.00567,"kevAdded":null,"exploit":false},{"id":"CVE-2024-43227","published":"2024-08-12T21:07:03.693Z","updated":"2026-04-28T16:10:09.925Z","title":"WordPress BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer for Elementor & Gutenberg plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"BetterDocs","kev":false,"epss":0.0026,"kevAdded":null,"exploit":false},{"id":"CVE-2024-39649","published":"2024-08-01T21:54:55.551Z","updated":"2026-04-28T16:10:07.645Z","title":"WordPress  Essential Addons for Elementor plugin <= 5.9.26 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"Essential Addons for Elementor","kev":false,"epss":0.00295,"kevAdded":null,"exploit":false},{"id":"CVE-2023-51375","published":"2024-06-21T13:37:09.238Z","updated":"2026-04-28T16:09:01.318Z","title":"WordPress EmbedPress plugin <= 3.8.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"WPDeveloper","product":"EmbedPress","kev":false,"epss":0.00323,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5058","published":"2024-06-21T11:37:26.896Z","updated":"2026-04-28T16:10:32.195Z","title":"WordPress Typing Text plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"Typing Text","kev":false,"epss":0.00304,"kevAdded":null,"exploit":false},{"id":"CVE-2024-31284","published":"2024-06-09T18:10:44.381Z","updated":"2026-04-28T16:09:30.115Z","title":"WordPress EmbedPress plugin <= 3.9.8 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"EmbedPress","kev":false,"epss":0.00397,"kevAdded":null,"exploit":false},{"id":"CVE-2024-31274","published":"2024-06-09T11:18:24.647Z","updated":"2026-04-28T16:09:29.816Z","title":"WordPress EmbedPress plugin <= 3.9.11 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"WPDeveloper","product":"EmbedPress","kev":false,"epss":0.00336,"kevAdded":null,"exploit":false},{"id":"CVE-2024-30467","published":"2024-06-09T10:49:06.693Z","updated":"2026-04-28T16:09:24.471Z","title":"WordPress Essential Blocks plugin <= 4.4.9 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"Essential Blocks for Gutenberg","kev":false,"epss":0.00409,"kevAdded":null,"exploit":false},{"id":"CVE-2023-41955","published":"2024-05-17T06:55:35.414Z","updated":"2026-04-28T16:08:39.415Z","title":"WordPress Essential Addons for Elementor plugin <= 5.8.8 - Contributor+ Privilege Escalation vulnerability","severity":"HIGH","score":8.8,"vendor":"WPDeveloper","product":"Essential Addons for Elementor","kev":false,"epss":0.00822,"kevAdded":null,"exploit":false},{"id":"CVE-2024-32717","published":"2024-05-09T12:23:16.096Z","updated":"2026-04-28T16:09:39.728Z","title":"WordPress SchedulePress plugin <= 5.0.8 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"SchedulePress","kev":false,"epss":0.00604,"kevAdded":null,"exploit":false},{"id":"CVE-2024-31306","published":"2024-04-07T17:42:54.112Z","updated":"2026-04-28T16:09:30.702Z","title":"WordPress Essential Blocks plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WPDeveloper","product":"Essential Blocks for Gutenberg","kev":false,"epss":0.00385,"kevAdded":null,"exploit":false},{"id":"CVE-2024-30226","published":"2024-03-28T04:57:46.257Z","updated":"2026-04-28T16:09:22.288Z","title":"WordPress BetterDocs plugin <= 3.3.3 - Unauthenticated PHP Object Injection vulnerability","severity":"CRITICAL","score":9,"vendor":"WPDeveloper","product":"BetterDocs","kev":false,"epss":0.00864,"kevAdded":null,"exploit":false},{"id":"CVE-2023-49184","published":"2023-12-15T14:56:35.899Z","updated":"2026-04-28T16:08:56.516Z","title":"WordPress Parallax Slider Block Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)","severity":"MEDIUM","score":5.9,"vendor":"WPDeveloper","product":"Parallax Slider Block","kev":false,"epss":0.00374,"kevAdded":null,"exploit":false},{"id":"CVE-2023-32245","published":"2023-11-18T22:32:56.251Z","updated":"2026-04-28T16:08:22.342Z","title":"WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Server Side Request Forgery (SSRF)","severity":"MEDIUM","score":5.4,"vendor":"WPDeveloper","product":"Essential Addons for Elementor Pro","kev":false,"epss":0.00269,"kevAdded":null,"exploit":false},{"id":"CVE-2022-46809","published":"2023-11-07T16:37:50.679Z","updated":"2026-04-28T16:07:54.613Z","title":"WordPress ReviewX Plugin <= 1.6.7 is vulnerable to CSV Injection","severity":"MEDIUM","score":6.1,"vendor":"WPDeveloper","product":"ReviewX – Multi-criteria Rating & Reviews for WooCommerce","kev":false,"epss":0.00836,"kevAdded":null,"exploit":false},{"id":"CVE-2023-32241","published":"2023-08-29T20:11:55.422Z","updated":"2026-04-28T16:08:22.280Z","title":"WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Cross Site Scripting (XSS)","severity":"HIGH","score":7.1,"vendor":"WPDeveloper","product":"Essential Addons for Elementor Pro","kev":false,"epss":0.00374,"kevAdded":null,"exploit":false},{"id":"CVE-2023-32243","published":"2023-05-12T07:23:22.657Z","updated":"2026-04-28T16:08:22.366Z","title":"WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation","severity":"CRITICAL","score":9.8,"vendor":"WPDeveloper","product":"Essential Addons for Elementor","kev":false,"epss":0.75531,"kevAdded":null,"exploit":true}]}