SE
Product
Sina Extension for Elementor
11
CVEs
0
On KEV
6.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 11Low 0
Watch
Add Sina Extension for Elementor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-6229 | 6.4 | Mar 23 | Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Fancy Text Widget` And `Countdown Widget` Affected: through 3.7.0 |
| CVE-2025-6228 | 6.4 | Aug 1 | Sina Extension for Elementor <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Sina Posts`, `Sina Blog Post` and `Sina Table` Widgets Affected: through 3.7.0 |
| CVE-2025-49262 | 5.4 | Jun 6 | WordPress Sina Extension for Elementor plugin <= 3.6.1 - Cross Site Scripting (XSS) Vulnerability Affected: through 3.6.1 |
| CVE-2025-1517 | 5.4 | Feb 26 | Sina Extension for Elementor <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text, Countdown Widget, and Login Form Shortcodes Affected: through 3.6.0 |
| CVE-2024-12624 | 5.4 | Jan 7 | Sina Extension for Elementor <= 3.5.91 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Sina Image Differ Affected: through 3.5.91 |
| CVE-2024-5260 | 5.4 | Jul 2 | Sina Extension for Elementor <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via read_more_text Parameter Affected: through 3.5.5 |
| CVE-2024-5036 | 5.4 | Jun 20 | Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting Affected: through 3.5.4 |
| CVE-2024-4373 | 5.4 | May 15 | Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.3 - Authenticated (Contributor+) Stored Cross-site Scriping via 'Sina Particle Layer' Affected: through 3.5.3 |
| CVE-2024-4333 | 5.4 | May 14 | Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.3 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting Affected: through 3.5.3 |
| CVE-2024-3988 | 5.4 | Apr 25 | Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Sina Fancy Text Widget Affected: through 3.5.2 |
| CVE-2024-9540 | 4.3 | Oct 16 | Sina Extension for Elementor <= 3.5.7 - Authenticated (Contributor+) Sensitive Information Exposure via Sina Modal Box Widget Elementor Template Affected: through 3.5.7 |
Showing 11
