CrestaProject

Products

ProductCVEsExploitedLatest
Attesa Extra2–Oct 27, 2025
Cresta Addons for Elementor1–Nov 4, 2024

Exploited and recent CVEs

  • CVE-2025-62971 Medium 6.5 WordPress Attesa Extra plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-10688 Medium 4.3 Attesa Extra <= 1.4.2 - Authenticated (Contributor+) Post Disclosure 0.3%
  • CVE-2024-51680 Medium 6.5 WordPress Cresta Addons for Elementor plugin <= 1.0.9 - Stored Cross Site Scripting (XSS) vulnerability 0.3%