Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Sina Extension for Elementor — Vulnerabilities & Security Advisories 16

All 16 CVE vulnerabilities found in Sina Extension for Elementor, with AI-generated Chinese analysis, references, and POCs.

This page documents known security weaknesses affecting the Sina Extension for Elementor, a WordPress plugin developed by Sina. It aggregates vulnerability data related to this specific third-party extension that integrates Sina social media services with the Elementor page builder interface. The collection includes identified flaws such as cross-site scripting, unauthorized access, and information disclosure issues reported between early 2022 and mid-2024. By centralizing this information, the page aims to provide a clear historical record of security incidents associated with this product. Users can track the vendor’s advisory timeline to understand how quickly patches were deployed for critical flaws. It also serves as a resource to understand the broader weakness classes that impact the extension, helping administrators assess risk exposure. Visitors can look up the product’s vulnerability history to identify recurring security patterns or specific versions that remain unpatched. This aggregation supports security researchers and website owners in making informed decisions about updates and mitigations. The content is organized to facilitate easy searching by vulnerability type or date, ensuring that technical details are accessible without unnecessary clutter. This resource does not include exploit codes or attack tutorials, focusing solely on factual reporting of disclosed security issues.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2026-14190 Sina Extension for Elementor < 3.10.2 - Reflected XSS - - 2026-07-27
CVE-2025-6229 Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Fancy Text Widget` And `Countdown Widget` CWE-79 6.4 Medium 2026-03-23
CVE-2025-6228 Sina Extension for Elementor <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Sina Posts`, `Sina Blog Post` and `Sina Table` Widgets CWE-79 6.4 Medium 2025-08-01
CVE-2025-49262 WordPress Sina Extension for Elementor plugin <= 3.6.1 - Cross Site Scripting (XSS) Vulnerability CWE-79 7.6 High 2025-06-06
CVE-2025-1517 Sina Extension for Elementor <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text, Countdown Widget, and Login Form Shortcodes CWE-79 6.4 Medium 2025-02-26
CVE-2024-12624 Sina Extension for Elementor <= 3.5.91 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Sina Image Differ CWE-79 6.4 Medium 2025-01-07
CVE-2024-9540 Sina Extension for Elementor <= 3.5.7 - Authenticated (Contributor+) Sensitive Information Exposure via Sina Modal Box Widget Elementor Template CWE-200 4.3 Medium 2024-10-16
CVE-2024-5260 Sina Extension for Elementor <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via read_more_text Parameter CWE-79 6.4 Medium 2024-07-02
CVE-2024-5036 Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CWE-79 6.4 Medium 2024-06-20
CVE-2024-35703 WordPress Sina Extension for Elementor plugin <= 3.5.3 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2024-06-08
CVE-2024-34384 WordPress Sina Extension for Elementor plugin <= 3.5.1 - Local File Inclusion vulnerability CWE-22 6.5 Medium 2024-06-04
CVE-2024-4373 Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.3 - Authenticated (Contributor+) Stored Cross-site Scriping via 'Sina Particle Layer' CWE-79 6.4 Medium 2024-05-15
CVE-2024-4333 Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.3 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting CWE-79 6.4 Medium 2024-05-14
CVE-2024-3988 Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Sina Fancy Text Widget CWE-79 6.4 Medium 2024-04-25
CVE-2024-29935 WordPress Sina Extension for Elementor plugin <= 3.5.0 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2024-03-27
CVE-2021-24269 Sina Extension for Elementor < 3.3.12 - Contributor+ Stored XSS CWE-79 5.4 - 2021-05-05

All 16 known CVE vulnerabilities affecting Sina Extension for Elementor with full Chinese analysis, references, and POCs where available.