Devscred - vulnerabilities (CVEs)

5 CVEs in 3 products, 0 in the last 30 days, newest from 2025-04-01.

Products

• Exclusive Addons For Elementor - 3 CVEs
• Design Blocks - 1 CVEs
• Shopcred - 1 CVEs

Newest CVEs of Devscred

• CVE-2025-31829 - CVSS 6.5 (medium), 2025-04-01: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devscred ShopCred shopcred allows DOM-Based XSS.This…
• CVE-2025-31815 - CVSS 6.5 (medium), 2025-04-01: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devscred Design Blocks exclusive-blocks allows Stored…
• CVE-2024-0823 - CVSS 5.4 (medium), 2024-02-05: The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Link To' url in carousels in all versions up to,…
• CVE-2024-0824 - CVSS 6.4 (medium), 2024-01-27: The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Link Anything functionality in all versions up…
• CVE-2022-45067 - CVSS 8.8 (high), 2023-02-02: Cross-Site Request Forgery (CSRF) vulnerability in DevsCred Exclusive Addons Elementor plugin <= 2.6.1 versions.