What’s Vulnerable › Products

dotrex PowerFolio – Portfolio & Image Gallery for Elementor vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your dotrex PowerFolio – Portfolio & Image Gallery for Elementor version is affected

Latest dotrex PowerFolio – Portfolio & Image Gallery for Elementor vulnerabilities

• CVE-2025-7046 — Portfolio for Elementor & Image Gallery | PowerFolio <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS (CVSS 5.4)
• CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
• CVE-2024-22150 — WordPress Post Grid, Image Gallery & Portfolio for Elementor | PowerFolio Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)