Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

duongancol vulnerabilities

5 published CVEs name duongancol among the affected products.

Newest CVEs

  • CVE-2026-4805

    Woostify <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lity.js Library via data-lity Attribute in Custom HTML Block

    duongancol · Woostify

    Medium6.4
  • CVE-2025-60101

    WordPress Woostify Theme <= 2.4.2 - Cross Site Scripting (XSS) Vulnerability

    duongancol · Woostify

    Medium5.9
  • CVE-2024-10794

    Boostify Header Footer Builder for Elementor <= 1.3.6 - Authenticated (Contributor+) Post Disclosure

    duongancol · Boostify Header Footer Builder for Elementor

    Medium4.3
  • CVE-2024-4788

    Boostify Header Footer Builder for Elementor <= 1.3.5 - Missing Authorization to Page/Post Creation

    duongancol · Boostify Header Footer Builder for Elementor

    Medium4.3
  • CVE-2024-5006

    Boostify Header Footer Builder for Elementor <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via size Parameter

    duongancol · Boostify Header Footer Builder for Elementor

    Medium6.4