Sinaextra Sina Extension for Elementor 3.2.0 for WordPress

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

14CVEs

CVE-2024-34384

WordPress Sina Extension for Elementor plugin <= 3.5.1 - Local File Inclusion vulnerability

Published 2024-06-04 · Modified

8.8EPSS 0.006

CVE-2025-49262

WordPress Sina Extension for Elementor plugin <= 3.6.1 - Cross Site Scripting (XSS) Vulnerability

Published 2025-06-06 · Modified

7.6EPSS 0.003

CVE-2019-15839

The sina-extension-for-elementor plugin before 2.2.1 for WordPress has local file inclusion.

Published 2019-08-30 · Modified

7.5EPSS 0.024

CVE-2024-29935

WordPress Sina Extension for Elementor plugin <= 3.5.0 - Cross Site Scripting (XSS) vulnerability

Published 2024-03-27 · Modified

6.5EPSS 0.003

CVE-2024-35703

WordPress Sina Extension for Elementor plugin <= 3.5.3 - Cross Site Scripting (XSS) vulnerability

Published 2024-06-08 · Modified

6.5EPSS 0.002

CVE-2025-1517

Sina Extension for Elementor <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text, Countdown Widget, and Login Form Shortcodes

Published 2025-02-26 · Analyzed

6.4EPSS 0.005

CVE-2024-5260

Sina Extension for Elementor <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via read_more_text Parameter

Published 2024-07-02 · Modified

6.4EPSS 0.005

CVE-2024-3988

Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Sina Fancy Text Widget

Published 2024-04-25 · Modified

6.4EPSS 0.004

CVE-2024-5036

Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

Published 2024-06-20 · Modified

6.4EPSS 0.004

CVE-2024-4333

Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.3 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting

Published 2024-05-14 · Modified

6.4EPSS 0.004

CVE-2024-4373

Published 2024-05-15 · Modified

6.4EPSS 0.004

CVE-2024-12624

Sina Extension for Elementor <= 3.5.91 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Sina Image Differ

Published 2025-01-07 · Analyzed

6.4EPSS 0.003

CVE-2021-24269

Sina Extension for Elementor < 3.3.12 - Contributor+ Stored XSS

Published 2021-05-05 · Modified