# cve.now: Sonalsinha21

The newest entries naming Sonalsinha21 as an affected vendor (up to 200), of 30 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-6972](https://cve.now/CVE-2026-6972.md): SKT Skill Bar \<= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2025-54005](https://cve.now/CVE-2025-54005.md): WordPress SKT Page Builder plugin \<= 4.9 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2025-7820](https://cve.now/CVE-2025-7820.md): SKT PayPal for WooCommerce \<= 1.4 - Unauthenticated Payment Bypass (CVSS 7.5)
- [CVE-2025-66090](https://cve.now/CVE-2025-66090.md): WordPress SKT Skill Bar plugin \<= 2.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2025-60138](https://cve.now/CVE-2025-60138.md): WordPress SKT Blocks plugin \<= 2.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2025-8564](https://cve.now/CVE-2025-8564.md): SKT Addons for Elementor \<= 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets (CVSS 6.4)
- [CVE-2025-47608](https://cve.now/CVE-2025-47608.md): WordPress Recover abandoned cart for WooCommerce plugin \<= 2.5 - SQL Injection Vulnerability (CVSS 9.3)
- [CVE-2025-48270](https://cve.now/CVE-2025-48270.md): WordPress SKT Blocks plugin \<= 2.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- [CVE-2025-47482](https://cve.now/CVE-2025-47482.md): WordPress SKT Skill Bar plugin \<= 2.4 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- [CVE-2025-46243](https://cve.now/CVE-2025-46243.md): WordPress Recover abandoned cart for WooCommerce plugin \<= 2.2 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3)
- [CVE-2025-46235](https://cve.now/CVE-2025-46235.md): WordPress SKT Blocks – Gutenberg based Page Builder plugin \<= 2.0 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- [CVE-2025-26998](https://cve.now/CVE-2025-26998.md): WordPress SKT Blocks – Gutenberg based Page Builder plugin \<= 1.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2025-26880](https://cve.now/CVE-2025-26880.md): WordPress SKT Skill Bar plugin \<= 2.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2025-3276](https://cve.now/CVE-2025-3276.md): SKT Blocks – Gutenberg based Page Builder \<= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2025-30812](https://cve.now/CVE-2025-30812.md): WordPress SKT Addons for Elementor plugin \<= 3.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2025-26771](https://cve.now/CVE-2025-26771.md): WordPress SKT Blocks plugin \<= 1.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-13665](https://cve.now/CVE-2024-13665.md): Admire Extra \<= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2024-13733](https://cve.now/CVE-2024-13733.md): SKT Blocks – Gutenberg based Page Builder \<= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2025-24535](https://cve.now/CVE-2025-24535.md): WordPress SKT Donation plugin \<= 1.9 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2024-12848](https://cve.now/CVE-2024-12848.md): SKT Page Builder \<= 4.6 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8)
- [CVE-2024-37493](https://cve.now/CVE-2024-37493.md): WordPress Posterity theme \<= 3.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-54346](https://cve.now/CVE-2024-54346.md): WordPress Barter theme \<= 1.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-54345](https://cve.now/CVE-2024-54345.md): WordPress Bicycleshop theme \<= 1.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-10693](https://cve.now/CVE-2024-10693.md): SKT Addons for Elementor \<= 3.3 - Authenticated (Contributor+) Post Disclosure (CVSS 4.3)
- [CVE-2024-48036](https://cve.now/CVE-2024-48036.md): WordPress SKT Blocks plugin \<= 1.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2022-4974](https://cve.now/CVE-2022-4974.md): Freemius SDK \<= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
- [CVE-2024-43995](https://cve.now/CVE-2024-43995.md): WordPress Posterity theme \<= 3.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-44007](https://cve.now/CVE-2024-44007.md): WordPress SKT Templates – Elementor & Gutenberg templates plugin \<= 6.14 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2024-5091](https://cve.now/CVE-2024-5091.md): SKT Addons for Elementor \<= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate and Creative Slider Widgets (CVSS 7.4)
- [CVE-2024-1337](https://cve.now/CVE-2024-1337.md): SKT Page Builder \<= 4.1 - Missing Authorization to Authenticated(Subscriber+) Content Injection (CVSS 4.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/sonalsinha21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.