Plugin Devs
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Blog, Posts and Category Filter for Elementor | 2 | – | Oct 6, 2026 |
| Post Carousel Slider for Elementor | 2 | – | Sep 22, 2025 |
| News Ticker for Elementor | 1 | – | Dec 13, 2024 |
| Product Carousel Slider for Elementor | 1 | – | Sep 5, 2025 |
| Shopify to WooCommerce Migration | 1 | – | Apr 3, 2025 |
Exploited and recent CVEs
- CVE-2026-40806 WordPress Blog, Posts and Category Filter for Elementor plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-57955 WordPress Post Carousel Slider for Elementor Plugin <= 1.7.0 - Broken Access Control Vulnerability 0.5%
- CVE-2025-58816 WordPress Product Carousel Slider for Elementor Plugin <= 2.1.3 - Broken Access Control Vulnerability 0.2%
- CVE-2025-31795 WordPress Shopify to WooCommerce Migration plugin <= 1.3.0 - Settings Change vulnerability 0.4%
- CVE-2025-22648 WordPress Blog, Posts and Category Filter for Elementor plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-54278 WordPress News Ticker for Elementor plugin <= 2.1.3 - Broken Access Control vulnerability 0.4%
- CVE-2024-53749 WordPress Post Carousel Slider for Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability 0.2%