elfsight vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 20255
3. 20261

Newest CVEs

• CVE-2026-39696

  WordPress Elfsight WhatsApp Chat CC plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

  Elfsight · Elfsight WhatsApp Chat CC

  Medium6.5
• CVE-2025-31045

  WordPress elfsight Contact Form widget plugin <= 2.3.1 - Sensitive Data Exposure Vulnerability

  elfsight · elfsight Contact Form widget

  High7.5
• CVE-2025-31588

  WordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

  elfsight · Elfsight Testimonials Slider

  Medium5.4
• CVE-2025-31587

  WordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

  elfsight · Elfsight Testimonials Slider

  Medium5.9
• CVE-2025-31584

  WordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Broken Access Control vulnerability

  elfsight · Elfsight Testimonials Slider

  Medium5.4
• CVE-2025-26561

  WordPress Elfsight Yottie Lite Plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

  elfsight · Elfsight Yottie Lite

  Medium5.9
• CVE-2024-10390

  Elfsight Telegram Chat CC <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting

  Elfsight · Elfsight Telegram Chat CC

  Medium6.4
• CVE-2024-4102

  Pricing Table <= 2.0.1 - Missing Authorization

  elfsight · Pricing Table

  Medium5.4
• CVE-2024-4100

  Pricing Table <= 2.0.1 - Cross-Site Request Forgery via ajax()

  elfsight · Pricing Table

  Medium5.3