← All credits
Craig Smith
245 vulnerability records and advisories credit this contributor.
CVE-2025-13535
King Addons for Elementor <= 51.1.38 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Widgets
CVE-2025-2332
Export All Posts, Products, Orders, Refunds & Users <= 2.13 - Unauthenticated PHP Object Injection
CVE-2024-0334
Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Cross-Site Scripting via Elementor Widget URL Custom Attributes
CVE-2025-1665
Avada Builder <= 3.11.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-12537
Addon Elements for Elementor <= 1.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-9204
Smart Custom 404 Error Page <= 11.4.7 - Reflected Cross-Site Scripting
CVE-2024-0824
Exclusive Addons for Elementor <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Anything
CVE-2024-5668
Lightbox & Modal Popup WordPress Plugin – FooBox <= 2.7.28 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via HTML Data Attributes
CVE-2024-5502
Piotnet Addons For Elementor <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
CVE-2025-14275
Jeg Elementor Kit <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget