Skip to content
OpenAdvisories

Vendor

cssigniterteam

5 known vulnerabilities.

Products

GutenBee – Gutenberg Blocks 2 Elements Plus! 2 AudioIgniter Music Player 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2025-8566

    GutenBee – Gutenberg Blocks <= 2.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The GutenBee – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via parameters in the CountUp and Google Maps Blocks in all versions up to, and including, 2.18.0 due to insufficient input sanitization and output escaping. Thi…

    cssigniterteam GutenBee – Gutenberg Blocks Web / CMS
  • Medium 6.4
    CVE-2025-8689

    Elements Plus! <= 2.16.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

    The Elements Plus! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Comparison, HotSpot Plus, and Google Maps widgets in all versions up to, and including, 2.16.4 due to insufficient input sanitization and output escapi…

    cssigniterteam Elements Plus! Web / CMS
  • Medium 6.4
    CVE-2024-2335

    Elements Plus! <= 2.16.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget links

    The Elements Plus! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget link URLs in all versions up to, and including, 2.16.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes …

    cssigniterteam Elements Plus! Web / CMS