Skip to content
OpenAdvisories

Vendor

Plugin Devs

7 known vulnerabilities.

Products

Blog, Posts and Category Filter for Elementor 2 Post Carousel Slider for Elementor 2 News Ticker for Elementor 1 Product Carousel Slider for Elementor 1 Shopify to WooCommerce Migration 1
All Critical High Medium Low Exploited only

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-57955

    WordPress Post Carousel Slider for Elementor Plugin <= 1.7.0 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Plugin Devs Post Carousel Slider for Elementor post-carousel-slider-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Carousel Slider for Elementor: from n/a th…

    Plugin Devs Post Carousel Slider for Elementor
  • Medium 6.5
    CVE-2025-31795

    WordPress Shopify to WooCommerce Migration plugin <= 1.3.0 - Settings Change vulnerability

    Missing Authorization vulnerability in Plugin Devs Shopify to WooCommerce Migration migrate-shopify-to-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shopify to WooCommerce Migration: from n/a through <=…

    Plugin Devs Shopify to WooCommerce Migration Web / CMS
  • Medium 6.5
    CVE-2025-22648

    WordPress Blog, Posts and Category Filter for Elementor plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Devs Blog, Posts and Category Filter for Elementor blog-posts-and-category-for-elementor allows Stored XSS.This issue affects Blog, Posts and Category…

    Plugin Devs Blog, Posts and Category Filter for Elementor
  • Medium 4.3
    CVE-2024-54278

    WordPress News Ticker for Elementor plugin <= 2.1.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Plugin Devs News Ticker for Elementor news-ticker-for-elementor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects News Ticker for Elementor: from n/a through <= 2.1.3.

    Plugin Devs News Ticker for Elementor
  • Medium 6.5
    CVE-2024-53749

    WordPress Post Carousel Slider for Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Devs Post Carousel Slider for Elementor post-carousel-slider-for-elementor allows Stored XSS.This issue affects Post Carousel Slider for Elementor: fr…

    Plugin Devs Post Carousel Slider for Elementor