Plugin Devs - vulnerabilities (CVEs)

7 CVEs in 6 products, 1 in the last 30 days, newest from 2026-10-06.

Products

CVE-2026-40806 - CVSS 7.1 (high), 2026-10-06: Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions.
CVE-2025-57955 - CVSS 6.5 (medium), 2025-09-22: Missing Authorization vulnerability in Plugin Devs Post Carousel Slider for Elementor post-carousel-slider-for-elementor allows Exploiting Incorrectly…
CVE-2025-58816 - CVSS 3.5 (low), 2025-09-05: Missing Authorization vulnerability in Plugin Devs Product Carousel Slider for Elementor ecommerce-product-carousel-slider-for-elementor allows Exploiting…
CVE-2025-31795 - CVSS 6.5 (medium), 2025-04-03: Missing Authorization vulnerability in Plugin Devs Shopify to WooCommerce Migration migrate-shopify-to-woocommerce allows Exploiting Incorrectly Configured…
CVE-2025-22648 - CVSS 6.5 (medium), 2025-03-27: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Devs Blog, Posts and Category Filter for…
CVE-2024-54278 - CVSS 4.3 (medium), 2024-12-13: Missing Authorization vulnerability in Plugin Devs News Ticker for Elementor news-ticker-for-elementor allows Accessing Functionality Not Properly Constrained…
CVE-2024-53749 - CVSS 6.5 (medium), 2024-12-01: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Devs Post Carousel Slider for Elementor…