Elfsight

10 CVEs across 7 Elfsight products. Browse Elfsight vulnerabilities, severities, and proof-of-concept exploits.

Elfsight products with known CVEs

ProductCVEs
Elfsight Testimonials Slider3
Pricing Table2
Elfsight Contact Form Widget1
Elfsight Telegram Chat Cc1
Elfsight Whatsapp Chat Cc1
Elfsight Yottie Lite1
Instalinker1
Elfsight CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-39696Medium6.52026-04-08Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elfsight Elfsight WhatsApp Chat CC elfsight-whatsapp-chat…
CVE-2025-31045High7.52025-06-09Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in elfsight elfsight Contact Form widget elfsight-contact-form allows…
CVE-2025-31588Medium5.42025-03-31Cross-Site Request Forgery (CSRF) vulnerability in elfsight Elfsight Testimonials Slider elfsight-testimonials-slider allows Cross Site Request Forgery.This is…
CVE-2025-31587Medium5.92025-03-31Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in elfsight Elfsight Testimonials Slider elfsight-testimonia…
CVE-2025-31584Medium5.42025-03-31Missing Authorization vulnerability in elfsight Elfsight Testimonials Slider elfsight-testimonials-slider allows Exploiting Incorrectly Configured Access Contr…
CVE-2025-26561Medium5.92025-02-13Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in elfsight Elfsight Yottie Lite yottie-lite allows Stored X…
CVE-2024-10390Medium6.42024-11-18The Elfsight Telegram Chat CC plugin for WordPress is vulnerable to unauthorized modification of data to a missing capability check on the 'updatePreferences'…
CVE-2024-4102Medium5.42024-07-09The Pricing Table plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajax() function in all versions up…
CVE-2024-4100Medium5.32024-07-09The Pricing Table plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.1. This is due to missing or incor…
CVE-2016-11005Medium6.12019-09-20The instalinker plugin before 1.1.2 for WordPress has includes/instalinker-admin-preview.php?client_id= XSS.