https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T18:06:32.430882+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-286545 EUVD-2026-286545 2026-10-04T18:06:32.482608+00:00 EUVD-2026-286545 https://cve.radiocsirt.org/vuln/fkie_cve-2025-9082 fkie_cve-2025-9082 2026-10-04T18:06:32.482659+00:00

The WPBITS Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget parameters in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping when dynamic content is enabled. This makes it possible for authenticated attackers with contributor-level permissions and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

 https://cve.radiocsirt.org/vuln/ghsa-w43j-jwpr-7gj3 GHSA-w43j-jwpr-7gj3 2026-10-04T18:06:32.482699+00:00

The WPBITS Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget parameters in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping when dynamic content is enabled. This makes it possible for authenticated attackers with contributor-level permissions and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.