← All credits
Matthew Rollings
300 vulnerability records and advisories credit this contributor.
CVE-2024-3728
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery & Interactive Circle
CVE-2024-5061
Enfold <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wrapper_class and class Parameters
CVE-2024-7413
Obfuscate Email <= 3.8.1 - Unauthenticated Full Path Disclosure
CVE-2024-7147
JetBlocks <= 1.3.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-4448
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Dual Color Header', 'Event Calendar', & 'Advanced Data Table'
CVE-2024-3985
Exclusive Addons for Elementor <= 2.6.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call to Action
CVE-2024-4574
Graphina – Elementor Charts and Graphs <= 1.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
CVE-2025-11814
Ultimate Addons for WPBakery Page Builder < 3.21.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-6058
WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload
CVE-2024-3718
The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar, Header Meta Content, Scroll Navigation, Pricing Table, & Flip Box