Michael
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Simple calendar for Elementor | 2 | – | May 7, 2025 |
| Custom post type templates for Elementor | 1 | – | Nov 4, 2024 |
| Post in page for Elementor | 1 | – | Apr 22, 2025 |
| Super Block Slider | 1 | – | Jan 24, 2025 |
Exploited and recent CVEs
- CVE-2025-47542 WordPress Simple calendar for Elementor plugin <= 1.6.5 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
- CVE-2025-46249 WordPress Simple calendar for Elementor plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
- CVE-2025-46225 WordPress Post in page for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-24682 WordPress Super Block Slider plugin <= 2.7.9 - Broken Access Control vulnerability 0.4%
- CVE-2024-51683 WordPress Custom post type templates for Elementor plugin <= 1.10.1 - Stored Cross Site Scripting (XSS) vulnerability 0.3%