https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T11:56:30.822336+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2024-26514 cnvd-2024-26514 2026-10-06T11:56:30.872080+00:00 cnvd-2024-26514 https://cve.radiocsirt.org/vuln/euvd-2026-288547 EUVD-2026-288547 2026-10-06T11:56:30.872119+00:00 EUVD-2026-288547 https://cve.radiocsirt.org/vuln/fkie_cve-2024-5152 fkie_cve-2024-5152 2026-10-06T11:56:30.872133+00:00

The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ parameter in all versions up to, and including, 6.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

 https://cve.radiocsirt.org/vuln/ghsa-6mx3-v4px-m36j GHSA-6mx3-v4px-m36j 2026-10-06T11:56:30.872165+00:00

The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ parameter in all versions up to, and including, 6.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.