dotrex
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Power Ups for Elementor | 1 | – | Jan 25, 2025 |
| PowerFolio – Portfolio & Image Gallery for Elementor | 1 | – | Jul 4, 2025 |
Exploited and recent CVEs
- CVE-2025-7046 Portfolio for Elementor & Image Gallery | PowerFolio <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS 0.3%
- CVE-2024-13548 Power Ups for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%