Extension WordPress
Vulnérabilités Stratum Widgets for Elementor
Cette page rassemble les failles publiées pour Stratum Widgets for Elementor, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Stratum Widgets for Elementor
6 fiches
Stratum Widgets for Elementor <= 1.6.1 – Missing Authorization
The Stratum Widgets for Elementor plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.6.1. This makes it possible for authenticated attackers, with…
*-1.6.1
1.6.2
27/12/2025
Stratum – Elementor Widgets <= 1.6.0 – Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Google Maps and Image Hotspot Widgets
The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Advanced Google Maps and Image Hotspot widgets in all versions up to, and including, 1.6.0 due to insufficient input sanitization and…
*-1.6.0
1.6.1
31/07/2025
Stratum – Elementor Widgets <= 1.4.7 – Authenticated (Contributor+) Stored Cross-Site Scripting Vulnerability via Image Hotspot Widget
The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Hotspot widget in all versions up to, and including, 1.4.7 due to insufficient input sanitization and output escaping on user…
*-1.4.7
1.5.0
29/01/2025
Stratum – Elementor Widgets <= 1.4.4 – Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.4 in includes/templates/content-switcher.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract…
*-1.4.4
1.4.5
20/11/2024
Stratum – Elementor Widgets <= 1.4.1 – Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘label_years’ attribute within the Countdown widget in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping.…
*-1.4.1
1.4.2
14/06/2024
Stratum <= 1.3.15 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Stratum plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.3.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above,…
*-1.3.15
1.3.16
25/03/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.