CVE-2020-8426

概要

参考情報

• blog.impenetrable.tech/xss-in-wordpress-elementor-plugin · Exploit
• wordpress.org/plugins/elementor · Release Notes
• wpvulndb.com/vulnerabilities/10051 · Third Party Advisory

website builder のその他の脆弱性

• CVE-2025-8081中 4.9The Elementor plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.30.2 via the Import_Images::…
• CVE-2025-3075中 5.4The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plug…
• CVE-2024-54444中 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder el…
• CVE-2024-13445中 5.4The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bord…
• CVE-2024-8494中 6.5The Elementor Website Builder Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,…