<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: xpro-addons-140-widgets-for-elementor</title><description>Every new CVE for xpro-addons-140-widgets-for-elementor.</description><link>https://agentprime.io/</link><item><title>CVE-2026-84088: Xpro Elementor Addons &lt; 1.7.9 - Contributor+ Stored XSS via Interactive Circle Widget</title><link>https://agentprime.io/advisories/CVE-2026-84088/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84088/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Sep 2026 06:00:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-84146: Xpro Elementor Addons &lt; 1.7.8 - Unauthenticated Draft/Private Product Disclosure via Quick View</title><link>https://agentprime.io/advisories/CVE-2026-84146/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84146/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Sep 2026 06:00:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-7105: Xpro Addons &lt;= 1.5.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Creation via get_menu_content_editor() Function</title><link>https://agentprime.io/advisories/CVE-2026-7105/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-7105/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 05 Aug 2026 06:38:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-11614: Xpro Addons &lt;= 1.7.2 - Authenticated (Author+) Stored Cross-Site Scripting via &apos;custom_attributes&apos; Parameter of Multiple Widgets</title><link>https://agentprime.io/advisories/CVE-2026-11614/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-11614/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Jun 2026 02:29:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-15369: Xpro Addons — 140+ Widgets for Elementor &lt;= 1.5.0 - Missing Authorization to Unauthenticated Xpro Template Creation</title><link>https://agentprime.io/advisories/CVE-2025-15369/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-15369/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 20 May 2026 02:27:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-13368: Xpro Addons — 140+ Widgets for Elementor &lt;= 1.4.20 - Authenticated (Contributor+) Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2025-13368/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-13368/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 04 Apr 2026 07:41:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-2949: Xpro Addons — 140+ Widgets for Elementor &lt;= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Box Widget</title><link>https://agentprime.io/advisories/CVE-2026-2949/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-2949/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 04 Apr 2026 02:26:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14149: Xpro Addons — 140+ Widgets for Elementor &lt;= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Scroller Widget box link</title><link>https://agentprime.io/advisories/CVE-2025-14149/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14149/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Feb 2026 06:43:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-2108: 140+ Widgets | Xpro Addons For Elementor – FREE &lt;= 1.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via &apos;Site Title&apos; widget</title><link>https://agentprime.io/advisories/CVE-2025-2108/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2108/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Mar 2025 06:54:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-13649: 140+ Widgets | Xpro Addons For Elementor – FREE &lt;= 1.4.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2024-13649/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-13649/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 08 Mar 2025 11:16:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-12584: 140+ Widgets | Xpro Addons For Elementor – FREE &lt;= 1.4.6.2 - Authenticated (Contributor+) Post Disclosure via Post Duplication</title><link>https://agentprime.io/advisories/CVE-2024-12584/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-12584/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Jan 2025 06:41:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-10319: 140+ Widgets | Xpro Addons For Elementor – FREE &lt;= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template</title><link>https://agentprime.io/advisories/CVE-2024-10319/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-10319/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 05 Nov 2024 11:00:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-7791: 140+ Widgets | Xpro Addons For Elementor – FREE &lt;= 1.4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Grid Widget</title><link>https://agentprime.io/advisories/CVE-2024-7791/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-7791/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 27 Aug 2024 10:59:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-4471: 140+ Widgets | Best Addons For Elementor – FREE &lt;= 1.4.3.1 - Authenticated (Contributor+) PHP Object Injection</title><link>https://agentprime.io/advisories/CVE-2024-4471/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-4471/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 May 2024 12:43:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-4440: 140+ Widgets | Best Addons For Elementor – FREE &lt;= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets</title><link>https://agentprime.io/advisories/CVE-2024-4440/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-4440/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 May 2024 09:33:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-2250: 130+ Widgets | Best Addons For Elementor – FREE &lt;= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2024-2250/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-2250/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 29 Mar 2024 07:31:02 GMT</pubDate><category>CVE</category></item></channel></rss>