Pencilwp
4 CVEs across 2 Pencilwp products. Browse Pencilwp vulnerabilities, severities, and proof-of-concept exploits.
Pencilwp products with known CVEs
Pencilwp CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-24605 | Medium | 4.3 | 2026-01-23 | Missing Authorization vulnerability in pencilwp X Addons for Elementor x-addons-elementor allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2026-22518 | Medium | 6.5 | 2026-01-08 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pencilwp X Addons for Elementor x-addons-elementor allows… |
CVE-2025-9204 | Medium | 6.4 | 2025-10-03 | The X Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Youtube Video ID field in all versions up to, and includin… |
CVE-2025-48132 | Medium | 6.5 | 2025-05-16 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pencilwp X Addons for Elementor x-addons-elementor allows… |