CrestaProject
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Attesa Extra | 2 | – | Oct 27, 2025 |
| Cresta Addons for Elementor | 1 | – | Nov 4, 2024 |
Exploited and recent CVEs
- CVE-2025-62971 WordPress Attesa Extra plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2024-10688 Attesa Extra <= 1.4.2 - Authenticated (Contributor+) Post Disclosure 0.3%
- CVE-2024-51680 WordPress Cresta Addons for Elementor plugin <= 1.0.9 - Stored Cross Site Scripting (XSS) vulnerability 0.3%