目標達成 すべての支援者に感謝 — 100%達成しました!

目標: 1000 CNY · 調達済み: 1336 CNY

100%

Sina Extension for Elementor 产品漏洞列表 / CVE 中文分析 16

Sina Extension for Elementor 产品相关 16 条漏洞,AI 中文标题与摘要、CVSS、POC 一站汇总。

Sina Extension for Elementor 是一款由 Sina 开发的 WordPress 插件扩展组件。本聚合页收录了该插件涉及的安全漏洞,涵盖从早期版本至近期发布的完整时间范围内的各类风险,包括权限绕过、跨站脚本等常见问题。读者可通过此页面追踪该厂商的历史安全公告,深入了解此类组件的常见弱点模式,或便捷检索特定版本的产品历史漏洞记录,以便评估潜在风险并进行针对性防御。

ベンダー: Unknown

CVE IDタイトルCVSS深刻度公開日
CVE-2026-14190 Sina Extension for Elementor < 3.10.2 - Reflected XSS --2026-07-27
CVE-2025-6229 Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Fancy Text Widget` And `Countdown Widget` CWE-79 6.4 Medium2026-03-23
CVE-2025-6228 Sina Extension for Elementor <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Sina Posts`, `Sina Blog Post` and `Sina Table` Widgets CWE-79 6.4 Medium2025-08-01
CVE-2025-49262 WordPress Sina Extension for Elementor plugin <= 3.6.1 - Cross Site Scripting (XSS) Vulnerability CWE-79 7.6 High2025-06-06
CVE-2025-1517 Sina Extension for Elementor <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text, Countdown Widget, and Login Form Shortcodes CWE-79 6.4 Medium2025-02-26
CVE-2024-12624 Sina Extension for Elementor <= 3.5.91 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Sina Image Differ CWE-79 6.4 Medium2025-01-07
CVE-2024-9540 Sina Extension for Elementor <= 3.5.7 - Authenticated (Contributor+) Sensitive Information Exposure via Sina Modal Box Widget Elementor Template CWE-200 4.3 Medium2024-10-16
CVE-2024-5260 Sina Extension for Elementor <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via read_more_text Parameter CWE-79 6.4 Medium2024-07-02
CVE-2024-5036 Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CWE-79 6.4 Medium2024-06-20
CVE-2024-35703 WordPress Sina Extension for Elementor plugin <= 3.5.3 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2024-06-08
CVE-2024-34384 WordPress Sina Extension for Elementor plugin <= 3.5.1 - Local File Inclusion vulnerability CWE-22 6.5 Medium2024-06-04
CVE-2024-4373 Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.3 - Authenticated (Contributor+) Stored Cross-site Scriping via 'Sina Particle Layer' CWE-79 6.4 Medium2024-05-15
CVE-2024-4333 Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.3 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting CWE-79 6.4 Medium2024-05-14
CVE-2024-3988 Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Sina Fancy Text Widget CWE-79 6.4 Medium2024-04-25
CVE-2024-29935 WordPress Sina Extension for Elementor plugin <= 3.5.0 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2024-03-27
CVE-2021-24269 Sina Extension for Elementor < 3.3.12 - Contributor+ Stored XSS CWE-79 5.4 -2021-05-05

Sina Extension for Elementor 产品累计公开 16 条 CVE 漏洞,本页提供按时间倒序的完整列表,包含 CVSS、CWE、AI 中文摘要与可获取的 POC 链接。