Blog (Plugin Devs) - vulnerabilities (CVEs)

2 CVEs, 1 in the last 30 days, 1 known versions, newest CVE from 2026-10-06. Vendor: Plugin Devs.

CVEs of Blog

• CVE-2026-40806 - CVSS 7.1 (high), 2026-10-06: Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions.
• CVE-2025-22648 - CVSS 6.5 (medium), 2025-03-27: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Devs Blog, Posts and Category Filter for…