pencilwp vulnerabilities
4 published CVEs name pencilwp among the affected products.
- 4Published CVEs4 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-24605
WordPress X Addons for Elementor plugin <= 1.0.23 - Broken Access Control vulnerability
pencilwp · X Addons for Elementor
Medium4.3 - CVE-2026-22518
WordPress X Addons for Elementor plugin <= 1.0.23 - Cross Site Scripting (XSS) vulnerability
pencilwp · X Addons for Elementor
Medium6.5 - CVE-2025-9204
X Addons for Elementor <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Youtube Video ID Field
pencilwp · X Addons for Elementor
Medium6.4 - CVE-2025-48132
WordPress X Addons for Elementor plugin <= 1.0.16 - Cross Site Scripting (XSS) Vulnerability
pencilwp · X Addons for Elementor
Medium6.5