Elfsight
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Elfsight Testimonials Slider | 3 | – | Mar 31, 2025 |
| Pricing Table | 2 | – | Jul 9, 2024 |
| elfsight Contact Form widget | 1 | – | Jun 9, 2025 |
| Elfsight Telegram Chat CC | 1 | – | Nov 18, 2024 |
| Elfsight WhatsApp Chat CC | 1 | – | Apr 8, 2026 |
| Elfsight Yottie Lite | 1 | – | Feb 13, 2025 |
Exploited and recent CVEs
- CVE-2026-39696 WordPress Elfsight WhatsApp Chat CC plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability 0.1%
- CVE-2025-31045 WordPress elfsight Contact Form widget plugin <= 2.3.1 - Sensitive Data Exposure Vulnerability 0.5%
- CVE-2025-31588 WordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability 0.2%
- CVE-2025-31587 WordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-31584 WordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Broken Access Control vulnerability 0.3%
- CVE-2025-26561 WordPress Elfsight Yottie Lite Plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2024-10390 Elfsight Telegram Chat CC <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting 0.2%
- CVE-2024-4102 Pricing Table <= 2.0.1 - Missing Authorization 0.3%
- CVE-2024-4100 Pricing Table <= 2.0.1 - Cross-Site Request Forgery via ajax() 0.2%