Skip to content
OpenAdvisories

Vendor

futuriowp

6 known vulnerabilities.

Products

Futurio Extra 6
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-125433

    WordPress Futurio Extra plugin <= 2.0.25 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FuturioWP Futurio Extra futurio-extra allows Stored XSS.This issue affects Futurio Extra: from n/a through 2.0.25.

    futuriowp Futurio Extra
  • Medium 6.5
    CVE-2024-53802

    WordPress Futurio Extra plugin <= 2.0.14 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FuturioWP Futurio Extra futurio-extra allows Stored XSS.This issue affects Futurio Extra: from n/a through <= 2.0.14.

    futuriowp Futurio Extra
  • Medium 4.3
    CVE-2024-10695

    Futurio Extra <= 2.0.13 - Authenticated (Contributor+) Post Disclosure

    The Futurio Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.0.13 via the 'elementor-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authen…

    futuriowp Futurio Extra Web / CMS
  • Medium 6.5
    CVE-2024-50446

    WordPress Futurio Extra plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FuturioWP Futurio Extra futurio-extra.This issue affects Futurio Extra: from n/a through <= 2.0.11.

    futuriowp Futurio Extra
  • Medium 6.4
    CVE-2024-5646

    Futurio Extra <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Text Block Widget

    The Futurio Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘header_size’ attribute within the Advanced Text Block widget in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping. T…

    futuriowp Futurio Extra Web / CMS
  • Medium 6.5
    CVE-2023-40201

    WordPress Futurio Extra Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in FuturioWP Futurio Extra plugin <= 1.8.4 versions leads to activation of arbitrary plugin.

    futuriowp Futurio Extra