Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

wowdevs — Vulnerabilities & Security Advisories 11

Browse all 11 CVE security advisories affecting wowdevs. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Wowdevs develops gaming software with a core focus on World of Warcraft server emulation and related tools. Historically, their products have frequently contained remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues. Security researchers have documented multiple critical vulnerabilities in their offerings, with nine CVEs currently on record. Their codebase often contains hardcoded credentials and insufficient input validation, creating multiple attack vectors. While no major public security incidents have been widely reported, the consistent pattern of vulnerabilities suggests significant security concerns in their development practices.

CVE ID Title CVSS Severity Published
CVE-2026-62109 WordPress Sky Addons for Elementor plugin <= 3.8.4 - SQL Injection vulnerability — Sky Addons for Elementor CWE-89 7.6 High 2026-09-11
CVE-2026-7475 Sky Addons <= 3.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Script — Sky Addons – Elementor Addons with Widgets & Templates CWE-79 6.4 Medium 2026-05-08
CVE-2025-8216 Sky Addons for Elementor <= 3.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets — Sky Addons – Elementor Addons with Widgets & Templates CWE-79 6.4 Medium 2025-07-29
CVE-2025-46260 WordPress Sky Addons for Elementor plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability — Sky Addons for Elementor CWE-79 6.5 Medium 2025-04-24
CVE-2024-11601 Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) <= 2.6.1 - Cross-Site Request Forgery to Limited Arbitrary Options Update — Sky Addons – Elementor Addons with Widgets & Templates CWE-862 8.1 High 2024-11-22
CVE-2024-11104 Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) <= 2.6.2 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update — Sky Addons – Elementor Addons with Widgets & Templates CWE-862 8.1 High 2024-11-22
CVE-2024-9542 Sky Addons for Elementor <= 2.6.1 - Authenticated (Contributor+) Sensitive Information Exposure via Content Switcher Widget Elementor Template — Sky Addons – Elementor Addons with Widgets & Templates CWE-200 4.3 Medium 2024-11-21
CVE-2024-50433 WordPress Sky Addons for Elementor plugin <= 2.5.15 - Cross Site Scripting (XSS) vulnerability — Sky Addons for Elementor CWE-79 6.5 Medium 2024-10-28
CVE-2024-47332 WordPress Sky Addons for Elementor plugin <= 2.5.11 - Cross Site Scripting (XSS) vulnerability — Sky Addons for Elementor CWE-79 6.5 Medium 2024-10-06
CVE-2024-38687 WordPress Sky Addons for Elementor plugin <= 2.5.5 - Cross Site Scripting (XSS) vulnerability — Sky Addons for Elementor CWE-79 6.5 Medium 2024-07-20
CVE-2024-2286 Sky Addons for Elementor <= 2.4.0 - Authenticated(Contributor+) Stored Cross-site scripting via Wrapper Link URL — Sky Addons – Elementor Addons with Widgets & Templates CWE-79 6.4 Medium 2024-03-13

This page lists every published CVE security advisory associated with wowdevs. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.