Vendor

sonalsinha21

29 known vulnerabilities.

Products

SKT Blocks 6 SKT Addons for Elementor 4 SKT Skill Bar 4 SKT Page Builder 3 Recover abandoned cart for WooCommerce 2 SKT Blocks – Gutenberg based Page Builder 2 Posterity 2 Bicycleshop 1 SKT Templates – Elementor & Gutenberg templates 1 Admire Extra 1 SKT Donation 1 Barter 1 SKT PayPal for WooCommerce 1

All Critical High Medium Low Exploited only Public exploit

23 results · Clear filters · Feed

Medium 6.4

CVE-2026-6972

SKT Skill Bar <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

The SKT Skill Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `chart_size` attribute of the `skillwrapper` shortcode in all versions up to, and including, 2.6. This is due to insufficient input sanitization and output escaping on…

sonalsinha21 SKT Skill Bar Web / CMS

Aug 5, 2026
Medium 4.3

CVE-2025-54005

WordPress SKT Page Builder plugin <= 4.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in sonalsinha21 SKT Page Builder skt-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SKT Page Builder: from n/a through <= 4.9.

sonalsinha21 SKT Page Builder

Dec 16, 2025
Medium 6.5

CVE-2025-66090

WordPress SKT Skill Bar plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Skill Bar skt-skill-bar allows DOM-Based XSS.This issue affects SKT Skill Bar: from n/a through <= 2.5.

sonalsinha21 SKT Skill Bar

Nov 21, 2025
Medium 6.5

CVE-2025-60138

WordPress SKT Blocks plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through <= 2.6.

sonalsinha21 SKT Blocks

Sep 26, 2025
Medium 6.4

CVE-2025-8564

SKT Addons for Elementor <= 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

The SKT Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 3.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…

sonalsinha21 SKT Addons for Elementor Web / CMS

Sep 6, 2025
Medium 6.5

CVE-2025-48270

WordPress SKT Blocks plugin <= 2.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks allows DOM-Based XSS.This issue affects SKT Blocks: from n/a through <= 2.2.

sonalsinha21 SKT Blocks

May 19, 2025
Medium 6.5

CVE-2025-47482

WordPress SKT Skill Bar plugin <= 2.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Skill Bar skt-skill-bar allows Stored XSS.This issue affects SKT Skill Bar: from n/a through <= 2.4.

sonalsinha21 SKT Skill Bar

May 7, 2025
Medium 4.3

CVE-2025-46243

WordPress Recover abandoned cart for WooCommerce plugin <= 2.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in sonalsinha21 Recover abandoned cart for WooCommerce recover-wc-abandoned-cart allows Cross Site Request Forgery.This issue affects Recover abandoned cart for WooCommerce: from n/a through <= 2.2.

sonalsinha21 Recover abandoned cart for WooCommerce Web / CMS

Apr 22, 2025
Medium 6.5

CVE-2025-46235

WordPress SKT Blocks – Gutenberg based Page Builder plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through <= 2.0.

sonalsinha21 SKT Blocks

Apr 22, 2025
Medium 6.5

CVE-2025-26998

WordPress SKT Blocks – Gutenberg based Page Builder plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through <= 1.8.

sonalsinha21 SKT Blocks

Apr 15, 2025
Medium 6.5

CVE-2025-26880

WordPress SKT Skill Bar plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Skill Bar skt-skill-bar allows Stored XSS.This issue affects SKT Skill Bar: from n/a through <= 2.3.

sonalsinha21 SKT Skill Bar

Apr 15, 2025
Medium 6.4

CVE-2025-3276

SKT Blocks – Gutenberg based Page Builder <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

The SKT Blocks – Gutenberg based Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Carousel block in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it pos…

sonalsinha21 SKT Blocks – Gutenberg based Page Builder Web / CMS

Apr 12, 2025
Medium 6.5

CVE-2025-30812

WordPress SKT Addons for Elementor plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Addons for Elementor skt-addons-for-elementor allows Stored XSS.This issue affects SKT Addons for Elementor: from n/a through <= 3.5.

sonalsinha21 SKT Addons for Elementor

Mar 27, 2025
Medium 6.5

CVE-2025-26771

WordPress SKT Blocks plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through <= 1.7.

sonalsinha21 SKT Blocks

Feb 17, 2025
Medium 6.4

CVE-2024-13665

Admire Extra <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Admire Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'space' shortcode in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes …

sonalsinha21 Admire Extra Web / CMS

Feb 12, 2025
Medium 6.4

CVE-2024-13733

SKT Blocks – Gutenberg based Page Builder <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

The SKT Blocks – Gutenberg based Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's skt-blocks/post-carousel block in all versions up to, and including, 1.7 due to insufficient input sanitization and output escapin…

sonalsinha21 SKT Blocks – Gutenberg based Page Builder Web / CMS

Feb 4, 2025
Medium 4.3

CVE-2024-37493

WordPress Posterity theme <= 3.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in sonalsinha21 Posterity posterity allows Cross Site Request Forgery.This issue affects Posterity: from n/a through <= 3.3.

sonalsinha21 Posterity

Jan 2, 2025
Medium 6.5

CVE-2024-54346

WordPress Barter theme <= 1.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 Barter barter allows DOM-Based XSS.This issue affects Barter: from n/a through <= 1.6.

sonalsinha21 Barter

Dec 13, 2024
Medium 6.5

CVE-2024-54345

WordPress Bicycleshop theme <= 1.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 Bicycleshop bicycleshop allows DOM-Based XSS.This issue affects Bicycleshop: from n/a through <= 1.5.

sonalsinha21 Bicycleshop

Dec 13, 2024
Medium 4.3

CVE-2024-10693

SKT Addons for Elementor <= 3.3 - Authenticated (Contributor+) Post Disclosure

The SKT Addons for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.3 via the Unfold widget due to insufficient restrictions on which posts can be included. This makes it possible for authenticated a…

sonalsinha21 SKT Addons for Elementor Web / CMS

Nov 9, 2024
Medium 6.5

CVE-2024-48036

WordPress SKT Blocks plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks.This issue affects SKT Blocks: from n/a through <= 1.6.

sonalsinha21 SKT Blocks

Oct 17, 2024
Medium 6.5

CVE-2024-43995

WordPress Posterity theme <= 3.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in sonalsinha21 Posterity allows Stored XSS.This issue affects Posterity: from n/a through 3.6.

sonalsinha21 Posterity

Sep 17, 2024
Medium 4.3

CVE-2024-1337

SKT Page Builder <= 4.1 - Missing Authorization to Authenticated(Subscriber+) Content Injection

The SKT Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'saveSktbuilderPageData' function in all versions up to, and including, 4.1. This makes it possible for authenticated attacke…

sonalsinha21 SKT Page Builder Web / CMS

Feb 20, 2024