Sonalsinha21 vulnerabilities
30 CVEs and advisories name Sonalsinha21 as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-6972SKT Skill Bar <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2025-54005WordPress SKT Page Builder plugin <= 4.9 - Broken Access Control vulnerability
- CVE-2025-7820SKT PayPal for WooCommerce <= 1.4 - Unauthenticated Payment Bypass
- CVE-2025-66090WordPress SKT Skill Bar plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-60138WordPress SKT Blocks plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-8564SKT Addons for Elementor <= 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
- CVE-2025-47608WordPress Recover abandoned cart for WooCommerce plugin <= 2.5 - SQL Injection Vulnerability
- CVE-2025-48270WordPress SKT Blocks plugin <= 2.2 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-47482WordPress SKT Skill Bar plugin <= 2.4 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-46243WordPress Recover abandoned cart for WooCommerce plugin <= 2.2 - Cross Site Request Forgery (CSRF) Vulnerability
- CVE-2025-46235WordPress SKT Blocks – Gutenberg based Page Builder plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-26998WordPress SKT Blocks – Gutenberg based Page Builder plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-26880WordPress SKT Skill Bar plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-3276SKT Blocks – Gutenberg based Page Builder <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2025-30812WordPress SKT Addons for Elementor plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-26771WordPress SKT Blocks plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-13665Admire Extra <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-13733SKT Blocks – Gutenberg based Page Builder <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2025-24535WordPress SKT Donation plugin <= 1.9 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-12848SKT Page Builder <= 4.6 - Authenticated (Subscriber+) Arbitrary File Upload
- CVE-2024-37493WordPress Posterity theme <= 3.3 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-54346WordPress Barter theme <= 1.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-54345WordPress Bicycleshop theme <= 1.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-10693SKT Addons for Elementor <= 3.3 - Authenticated (Contributor+) Post Disclosure
- CVE-2024-48036WordPress SKT Blocks plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2022-4974Freemius SDK <= 2.4.2 - Missing Authorization Checks
- CVE-2024-43995WordPress Posterity theme <= 3.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-44007WordPress SKT Templates – Elementor & Gutenberg templates plugin <= 6.14 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-5091SKT Addons for Elementor <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate and Creative Slider Widgets
- CVE-2024-1337SKT Page Builder <= 4.1 - Missing Authorization to Authenticated(Subscriber+) Content Injection