Techeshta
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Card Elements for Elementor | 2 | – | Feb 27, 2025 |
| Card Elements for WPBakery | 1 | – | Sep 22, 2025 |
| Layouts for Elementor | 1 | – | Mar 31, 2024 |
| Layouts for WPBakery | 1 | – | Aug 5, 2026 |
| Post Layouts for Gutenberg | 1 | – | Jul 20, 2024 |
| Timeline Blocks for Gutenberg | 1 | – | Apr 28, 2026 |
Exploited and recent CVEs
- CVE-2026-7726 Layouts for WPBakery <= 1.1.3 - Missing Authorization to Unauthenticated Template Cache Manipulation via 'handle_sync' AJAX Action 0.5%
- CVE-2026-6551 Timeline Blocks for Gutenberg <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' Block Attribute 0.2%
- CVE-2025-58220 WordPress Card Elements for WPBakery Plugin <= 1.0.8 - Cross Site Scripting (XSS) Vulnerability 0.2%
- CVE-2024-13734 Card Elements for Elementor <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Profile Card Widget 0.3%
- CVE-2024-43123 WordPress Card Elements for Elementor plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-38682 WordPress Post Layouts for Gutenberg plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-30533 WordPress Layouts for Elementor plugin < 1.8 - Arbitrary File Upload vulnerability 0.5%