duongancol
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Boostify Header Footer Builder for Elementor | 3 | – | Nov 13, 2024 |
| Woostify | 2 | – | Apr 28, 2026 |
Exploited and recent CVEs
- CVE-2026-4805 Woostify <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lity.js Library via data-lity Attribute in Custom HTML Block 0.2%
- CVE-2025-60101 WordPress Woostify Theme <= 2.4.2 - Cross Site Scripting (XSS) Vulnerability 0.2%
- CVE-2024-10794 Boostify Header Footer Builder for Elementor <= 1.3.6 - Authenticated (Contributor+) Post Disclosure 0.5%
- CVE-2024-4788 Boostify Header Footer Builder for Elementor <= 1.3.5 - Missing Authorization to Page/Post Creation 0.3%
- CVE-2024-5006 Boostify Header Footer Builder for Elementor <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via size Parameter 0.3%