Extension WordPress
Vulnérabilités Sky Addons for Elementor
Cette page rassemble les failles publiées pour Sky Addons for Elementor, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Sky Addons for Elementor
10 fiches
Sky Addons <= 3.3.2 – Authenticated (Author+) Stored Cross-Site Scripting via Custom Script
The Sky Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `sky-custom-scripts` custom post type in all versions up to, and including, 3.3.2. This is due to the custom post type being registered with `capability_type…
*-3.3.2
3.3.3
07/05/2026
Sky Addons for Elementor <= 3.1.4 – Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
The Sky Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Multiple widgets in all versions up to, and including, 3.1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This…
*-3.1.4
3.2.0
28/07/2025
Sky Addons for Elementor <= 3.0.1 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Sky Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level…
*-3.0.1
3.0.3
22/04/2025
Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) <= 2.6.1 – Cross-Site Request Forgery to Limited Arbitrary Options Update
The Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blog, Video Gallery) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.1.…
*-2.6.1
2.6.2
21/11/2024
Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) <= 2.6.2 – Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update
The Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due…
*-2.6.2
2.6.3
21/11/2024
Sky Addons for Elementor <= 2.6.1 – Authenticated (Contributor+) Sensitive Information Exposure via Content Switcher Widget Elementor Template
The Sky Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.1 via the render function in modules/content-switcher/widgets/content-switcher.php. This makes it possible for authenticated attackers, with Contributor-level access…
*-2.6.1
2.6.2
20/11/2024
Sky Addons for Elementor <= 2.5.15 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Sky Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.5.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level…
*-2.5.15
2.5.16
24/10/2024
Sky Addons for Elementor <= 2.5.11 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Sky Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.5.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level…
*-2.5.11
2.5.12
26/09/2024
Sky Addons for Elementor <= 2.5.5 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Sky Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level…
*-2.5.5
2.5.6
10/07/2024
Sky Addons for Elementor <= 2.4.0 – Authenticated(Contributor+) Stored Cross-site scripting via Wrapper Link URL
The Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wrapper link URL value in all versions up to,…
*-2.4.0
2.5.0
12/03/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.