Vulnerabilities in Elfsight
9 resultsVexday analysis
Elfsight apresenta um perfil de risco baixo com apenas 2 vulnerabilidades registradas, nenhuma explorada ativamente nem crítica. A fraqueza dominante é Cross-Site Scripting (CWE-79), típica de aplicações web, e não há publicações recentes que indicassem escalação do risco.
CVE-2025-31045HIGHWordPress elfsight Contact Form widget plugin <= 2.3.1 - Sensitive Data Exposure VulnerabilityEPSS 0.4%CVE-2025-31584MEDIUMWordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-4102MEDIUMPricing Table <= 2.0.1 - Missing AuthorizationEPSS 0.3%CVE-2025-31587MEDIUMWordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2024-10390MEDIUMElfsight Telegram Chat CC <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-26561MEDIUMWordPress Elfsight Yottie Lite Plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2024-4100MEDIUMPricing Table <= 2.0.1 - Cross-Site Request Forgery via ajax()EPSS 0.2%CVE-2025-31588MEDIUMWordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerabilityEPSS 0.1%CVE-2026-39696MEDIUMWordPress Elfsight WhatsApp Chat CC plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%