Vulnerabilities in themewant
9 resultsCVE-2026-9018HIGHEasy Elements for Elementor – Addons & Website Templates <= 1.4.5 - Unauthenticated Privilege Escalation via 'custom_meta' ParameterEPSS 0.7%CVE-2026-56028CRITICALWordPress Easy Elements for Elementor – Addons & Website Templates plugin <= 1.4.9 - Privilege Escalation vulnerabilityEPSS 0.5%CVE-2026-7284CRITICALEasy Elements for Elementor <= 1.4.4 - Unauthenticated Privilege Escalation via easyel_handle_registerEPSS 0.5%CVE-2026-15650MEDIUMRT Mega Menu <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pointer_menu_item' Block AttributeEPSS 0.4%CVE-2025-68005MEDIUMWordPress Easy Hotel Booking plugin <= 1.9.2 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-14855MEDIUMRT Mega Menu <= 1.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via rtmega_update_menu_options AJAX ActionEPSS 0.3%CVE-2026-65433MEDIUMWordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-59559MEDIUMWordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-57938MEDIUMWordPress Easy Hotel Booking plugin <= 1.9.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%