WordSec
WordSec

Sina Extension for Elementor

Explore Sina Extension for Elementor vulnerabilities across all versions. Currently tracking 15 known vulnerabilities, including severity, impact, and patch status.

01234567891019.06.2019Today19.06.20199.8Sina Extension for Elementor < 2.2.1 - Local File Inclusion CVSS 9.8 · 19.06.201913.04.20215.4Sina Extension for Elementor <= 3.3.11 - Stored Cross-Site Scripting CVSS 5.4 · 13.04.202125.03.20246.4Sina Extension for Elementor <= 3.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 25.03.202424.04.20246.4Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Sina Fancy Text Widget CVSS 6.4 · 24.04.202403.05.20248.8Sina Extension for Elementor <= 3.5.1 - Authenticated (Contributor+) Local File Inclusion CVSS 8.8 · 03.05.202413.05.20246.4Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.3 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting CVSS 6.4 · 13.05.202414.05.20246.4Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.3 - Authenticated (Contributor+) Stored Cross-site Scriping via 'Sina Particle Layer' CVSS 6.4 · 14.05.202419.06.20246.4Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CVSS 6.4 · 19.06.202401.07.20246.4Sina Extension for Elementor <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via read_more_text Parameter CVSS 6.4 · 01.07.202415.10.20244.3Sina Extension for Elementor <= 3.5.7 - Authenticated (Contributor+) Sensitive Information Exposure via Sina Modal Box Widget Elementor Template CVSS 4.3 · 15.10.202406.01.20256.4Sina Extension for Elementor <= 3.5.91 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Sina Image Differ CVSS 6.4 · 06.01.202525.02.20256.4Sina Extension for Elementor <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text, Countdown Widget, and Login Form Shortcodes CVSS 6.4 · 25.02.202505.06.20255.5Sina Extension for Elementor <= 3.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting CVSS 5.5 · 05.06.202531.07.20256.4Sina Extension for Elementor <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Sina Posts`, `Sina Blog Post` and `Sina Table` Widgets CVSS 6.4 · 31.07.202522.03.20266.4Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Fancy Text Widget` And `Countdown Widget` CVSS 6.4 · 22.03.2026

Strategic Overview

Avg CVSSMedium
6.5/ 10
Patch Coverage100%
Open

0

Fixed

15

Get automatic notifications for all Sina Extension for Elementor vulnerabilities before they are exploited.

Vulnerability Records

15 records
2026-03-22 18:10
Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Fancy Text Widget` And `Countdown Widget`
Sina Extension for Elementor
<= 3.7.0
CVE-2025-6229
6.4
Medium
WebbernautYes
2025-07-31 21:23
Sina Extension for Elementor <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Sina Posts`, `Sina Blog Post` and `Sina Table` Widgets
Sina Extension for Elementor
<= 3.7.0
CVE-2025-6228
6.4
Medium
stealthcopterYes
2025-06-05 00:00
Sina Extension for Elementor <= 3.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Sina Extension for Elementor
<= 3.6.1
CVE-2025-49262
5.5
Medium
Nabil IrawanYes
2025-02-25 19:36
Sina Extension for Elementor <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text, Countdown Widget, and Login Form Shortcodes
Sina Extension for Elementor
<= 3.6.0
CVE-2025-1517
6.4
Medium
zer0gh0stYes
2025-01-06 00:00
Sina Extension for Elementor <= 3.5.91 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Sina Image Differ
Sina Extension for Elementor
<= 3.5.91
CVE-2024-12624
6.4
Medium
zer0gh0stYes
2024-10-15 00:00
Sina Extension for Elementor <= 3.5.7 - Authenticated (Contributor+) Sensitive Information Exposure via Sina Modal Box Widget Elementor Template
Sina Extension for Elementor
<= 3.5.7
CVE-2024-9540
4.3
Medium
NishivYes
2024-07-01 20:25
Sina Extension for Elementor <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via read_more_text Parameter
Sina Extension for Elementor
<= 3.5.5
CVE-2024-5260
6.4
Medium
stealthcopterYes
2024-06-19 00:00
Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Sina Extension for Elementor
<= 3.5.4
CVE-2024-5036
6.4
Medium
wesley (wcraft)Yes
2024-05-14 13:32
Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.3 - Authenticated (Contributor+) Stored Cross-site Scriping via 'Sina Particle Layer'
Sina Extension for Elementor
<= 3.5.3
CVE-2024-4373
6.4
Medium
Ngô Thiên An (ancorn_)Yes
2024-05-13 00:00
Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.3 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting
Sina Extension for Elementor
<= 3.5.3
CVE-2024-4333
6.4
Medium
WebbernautYes
Showing 1–10 of 15 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C