Rife Elementor Extensions & Templates < 1.1.6 - Contributor+ Stored XSS
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.6%
exploitation probability
0.6%top 57% of all CVEs
observed exploitation
nono source reports it
The “Rife Elementor Extensions & Templates” WordPress Plugin before 1.1.6 has a widget that is vulnerable to stored Cross-Site Scripting(XSS) by lower-privileged users such as contributors, all via a similar method.
Affected products
Unknown · Rife Elementor Extensions & Templates