Pwrplugins - vulnerabilities (CVEs)
5 CVEs in 3 products, 0 in the last 30 days, newest from 2025-07-04.
Products
- Magic Buttons For Elementor - 2 CVEs
- Powerfolio - 2 CVEs
- Portfolio For Elementor - 1 CVEs
Newest CVEs of Pwrplugins
- CVE-2025-7046 - CVSS 6.4 (medium), 2025-07-04: The Portfolio for Elementor & Image Gallery | PowerFolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom JS Attributes of…
- CVE-2025-6687 - CVSS 6.4 (medium), 2025-07-02: The Magic Buttons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's magic-button shortcode in all versions up…
- CVE-2025-6686 - CVSS 6.4 (medium), 2025-07-02: The Magic Buttons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's magic-button shortcode in all versions up…
- CVE-2024-22150 - CVSS 6.5 (medium), 2024-01-31: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PWR Plugins Portfolio & Image Gallery for WordPress |…
- CVE-2022-4765 - CVSS 5.4 (medium), 2023-01-30: The Portfolio for Elementor WordPress plugin before 2.3.1 does not validate and escape some of its shortcode attributes before outputting them back in the…
