Log in Start free

sonalsinha21

Products

ProductCVEsExploitedLatest
SKT Blocks6–Sep 26, 2025
SKT Skill Bar4–Aug 5, 2026
SKT Addons for Elementor4–Sep 6, 2025
SKT Page Builder3–Dec 16, 2025
Recover abandoned cart for WooCommerce2–Jun 9, 2025
Posterity2–Jan 2, 2025
SKT Blocks – Gutenberg based Page Builder2–Apr 12, 2025
SKT Templates – Elementor & Gutenberg templates1–Sep 17, 2024
Barter1–Dec 13, 2024
Bicycleshop1–Dec 13, 2024
SKT Donation1–Jan 31, 2025
SKT PayPal for WooCommerce1–Nov 27, 2025
Admire Extra1–Feb 12, 2025

Exploited and recent CVEs

  • CVE-2026-6972 Medium 6.4 SKT Skill Bar <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2025-54005 Medium 4.3 WordPress SKT Page Builder plugin <= 4.9 - Broken Access Control vulnerability 0.2%
  • CVE-2025-7820 High 7.5 SKT PayPal for WooCommerce <= 1.4 - Unauthenticated Payment Bypass 0.3%
  • CVE-2025-66090 Medium 6.5 WordPress SKT Skill Bar plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-60138 Medium 6.5 WordPress SKT Blocks plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-8564 Medium 6.4 SKT Addons for Elementor <= 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets 0.2%
  • CVE-2025-47608 Critical 9.3 WordPress Recover abandoned cart for WooCommerce plugin <= 2.5 - SQL Injection Vulnerability 1.2%
  • CVE-2025-48270 Medium 6.5 WordPress SKT Blocks plugin <= 2.2 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-47482 Medium 6.5 WordPress SKT Skill Bar plugin <= 2.4 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-46243 Medium 4.3 WordPress Recover abandoned cart for WooCommerce plugin <= 2.2 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
  • CVE-2025-46235 Medium 6.5 WordPress SKT Blocks – Gutenberg based Page Builder plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-26998 Medium 6.5 WordPress SKT Blocks – Gutenberg based Page Builder plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-26880 Medium 6.5 WordPress SKT Skill Bar plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-3276 Medium 6.4 SKT Blocks – Gutenberg based Page Builder <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2025-30812 Medium 6.5 WordPress SKT Addons for Elementor plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2025-26771 Medium 6.5 WordPress SKT Blocks plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-13665 Medium 6.4 Admire Extra <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-13733 Medium 6.4 SKT Blocks – Gutenberg based Page Builder <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2025-24535 High 7.1 WordPress SKT Donation plugin <= 1.9 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-12848 High 8.8 SKT Page Builder <= 4.6 - Authenticated (Subscriber+) Arbitrary File Upload 1.0%
  • CVE-2024-37493 Medium 4.3 WordPress Posterity theme <= 3.3 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-54346 Medium 6.5 WordPress Barter theme <= 1.6 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-54345 Medium 6.5 WordPress Bicycleshop theme <= 1.5 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-10693 Medium 4.3 SKT Addons for Elementor <= 3.3 - Authenticated (Contributor+) Post Disclosure 0.3%
  • CVE-2024-48036 Medium 6.5 WordPress SKT Blocks plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-43995 Medium 6.5 WordPress Posterity theme <= 3.6 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-44007 High 7.1 WordPress SKT Templates – Elementor & Gutenberg templates plugin <= 6.14 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-5091 High 7.4 SKT Addons for Elementor <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate and Creative Slider Widgets 0.3%
  • CVE-2024-1337 Medium 4.3 SKT Page Builder <= 4.1 - Missing Authorization to Authenticated(Subscriber+) Content Injection 0.3%