Skip to content
OpenAdvisories

Vendor

Elfsight

9 known vulnerabilities.

Products

Elfsight Testimonials Slider 3 Pricing Table 2 Elfsight WhatsApp Chat CC 1 Elfsight Telegram Chat CC 1 elfsight Contact Form widget 1 Elfsight Yottie Lite 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-39696

    WordPress Elfsight WhatsApp Chat CC plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elfsight Elfsight WhatsApp Chat CC elfsight-whatsapp-chat allows DOM-Based XSS.This issue affects Elfsight WhatsApp Chat CC: from n/a through <= 1.2.0.

    Elfsight Elfsight WhatsApp Chat CC
  • Medium 5.4
    CVE-2025-31588

    WordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in elfsight Elfsight Testimonials Slider elfsight-testimonials-slider allows Cross Site Request Forgery.This issue affects Elfsight Testimonials Slider: from n/a through <= 1.0.1.

    Elfsight Elfsight Testimonials Slider
  • Medium 5.9
    CVE-2025-31587

    WordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in elfsight Elfsight Testimonials Slider elfsight-testimonials-slider allows Stored XSS.This issue affects Elfsight Testimonials Slider: from n/a through <= 1.0…

    Elfsight Elfsight Testimonials Slider
  • Medium 5.4
    CVE-2025-31584

    WordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in elfsight Elfsight Testimonials Slider elfsight-testimonials-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elfsight Testimonials Slider: from n/a through <= 1.0.1.

    Elfsight Elfsight Testimonials Slider
  • Medium 5.9
    CVE-2025-26561

    WordPress Elfsight Yottie Lite Plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in elfsight Elfsight Yottie Lite yottie-lite allows Stored XSS.This issue affects Elfsight Yottie Lite: from n/a through <= 1.3.3.

    Elfsight Elfsight Yottie Lite
  • Medium 6.4
    CVE-2024-10390

    Elfsight Telegram Chat CC <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting

    The Elfsight Telegram Chat CC plugin for WordPress is vulnerable to unauthorized modification of data to a missing capability check on the 'updatePreferences' function in all versions up to, and including, 1.1.0. This makes it possible for authenticated attac…

    Elfsight Elfsight Telegram Chat CC Web / CMS
  • Medium 5.4
    CVE-2024-4102

    Pricing Table <= 2.0.1 - Missing Authorization

    The Pricing Table plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajax() function in all versions up to, and including, 2.0.1. This makes it possible for authenticated attackers, with subscriber-level…

    Elfsight Pricing Table Web / CMS
  • Medium 5.3
    CVE-2024-4100

    Pricing Table <= 2.0.1 - Cross-Site Request Forgery via ajax()

    The Pricing Table plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.1. This is due to missing or incorrect nonce validation on the ajax() function. This makes it possible for unauthenticated attackers t…

    Elfsight Pricing Table Web / CMS