duongancol

Products

ProductCVEsExploitedLatest
Boostify Header Footer Builder for Elementor3–Nov 13, 2024
Woostify2–Apr 28, 2026

Exploited and recent CVEs

  • CVE-2026-4805 Medium 6.4 Woostify <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lity.js Library via data-lity Attribute in Custom HTML Block 0.2%
  • CVE-2025-60101 Medium 5.9 WordPress Woostify Theme <= 2.4.2 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2024-10794 Medium 4.3 Boostify Header Footer Builder for Elementor <= 1.3.6 - Authenticated (Contributor+) Post Disclosure 0.5%
  • CVE-2024-4788 Medium 4.3 Boostify Header Footer Builder for Elementor <= 1.3.5 - Missing Authorization to Page/Post Creation 0.3%
  • CVE-2024-5006 Medium 6.4 Boostify Header Footer Builder for Elementor <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via size Parameter 0.3%