Elements Plus (Cssigniterteam) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-09-11. Vendor: Cssigniterteam.

CVEs of Elements Plus

• CVE-2025-8689 - CVSS 6.4 (medium), 2025-09-11: The Elements Plus! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Comparison, HotSpot Plus, and Google Maps widgets…
• CVE-2024-2335 - CVSS 6.4 (medium), 2024-04-09: The Elements Plus! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget link URLs in all versions up to, and including,…