← All credits
wesley
325 vulnerability records and advisories credit this contributor.
CVE-2024-2798
Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
CVE-2024-1997
Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Messenger Chat Widget
CVE-2024-8484
REST API TO MiniProgram <= 4.7.1 - Unauthenticated SQL Injection
CVE-2024-5790
Happy Addons for Elementor <= 3.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gradient Heading Widget
CVE-2025-8151
HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions
CVE-2024-10020
Heateor Social Login WordPress <= 1.1.35 - Authentication Bypass via Disqus OAuth provider
CVE-2024-1414
Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call To Action Widget
CVE-2024-5554
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-2087
Brizy – Page Builder <= 2.4.43 - Unauthenticated Stored Cross-Site Scripting via Form
CVE-2024-2619
Elementor Header & Footer Builder <= 1.6.26 - Authenticated (Author+) HTML Injection