Skip to content
OpenAdvisories

Vendor

Michael

5 known vulnerabilities.

Products

Simple calendar for Elementor 2 Super Block Slider 1 Post in page for Elementor 1 Custom post type templates for Elementor 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-47542

    WordPress Simple calendar for Elementor plugin <= 1.6.5 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Michael Simple calendar for Elementor simple-calendar-for-elementor allows Cross Site Request Forgery.This issue affects Simple calendar for Elementor: from n/a through <= 1.6.5.

    Michael Simple calendar for Elementor
  • Medium 4.3
    CVE-2025-46249

    WordPress Simple calendar for Elementor plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Michael Simple calendar for Elementor simple-calendar-for-elementor allows Cross Site Request Forgery.This issue affects Simple calendar for Elementor: from n/a through <= 1.6.4.

    Michael Simple calendar for Elementor
  • Medium 6.5
    CVE-2025-46225

    WordPress Post in page for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Post in page for Elementor allows DOM-Based XSS. This issue affects Post in page for Elementor: from n/a through 1.0.1.

    Michael Post in page for Elementor
  • Medium 4.3
    CVE-2025-24682

    WordPress Super Block Slider plugin <= 2.7.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Michael Super Block Slider super-block-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Super Block Slider: from n/a through <= 2.7.9.

    Michael Super Block Slider
  • Medium 6.5
    CVE-2024-51683

    WordPress Custom post type templates for Elementor plugin <= 1.10.1 - Stored Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Custom post type templates for Elementor custom-post-type-templates-for-elementor allows Stored XSS.This issue affects Custom post type templates for…

    Michael Custom post type templates for Elementor