← All credits
Craig Smith
245 vulnerability records and advisories credit this contributor.
CVE-2023-7069
Advanced iFrame <= 2023.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-0823
Exclusive Addons for Elementor <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-1039
Lenix Elementor Leads addon <= 1.8.2 - Unauthenticated Stored Cross-Site Scripting via URL Form Field
CVE-2024-5614
Piotnet Addons For Elementor <= 2.4.29 - Unauthenticated Sensitive Information Exposure
CVE-2024-0442
Royal Elementor Addons and Templates <= 1.3.87 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-13227
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.235 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rank Math API
CVE-2024-12278
Booster for WooCommerce <= 7.2.4 - Unauthenticated Stored Cross-Site Scripting
CVE-2024-0326
Premium Addons for Elementor <= 4.10.17 - Authenticated(Contributor+) Stored Cross-Site Scripting via Link Wrapper
CVE-2024-6256
Feeds for YouTube (YouTube video, channel, and gallery plugin) <= 2.2.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
CVE-2025-0321
ElementsKit Pro <= 3.7.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via url Parameter