What’s Vulnerable › Products

shaonsina Sina Extension for Elementor vulnerabilities

18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your shaonsina Sina Extension for Elementor version is affected

Latest shaonsina Sina Extension for Elementor vulnerabilities

• CVE-2026-83541 — Sina Extension for Elementor 3.7.1 - 3.10.3 - Contributor+ Stored XSS via Table Widget (CVSS 6.8)
• CVE-2026-14190 — Sina Extension for Elementor < 3.10.2 - Reflected XSS (CVSS 6.1)
• CVE-2025-6229 — Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Fancy Text Widget` And `Countdown Widget` (CVSS 6.4)
• CVE-2025-6228 — Sina Extension for Elementor <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Sina Posts`, `Sina Blog Post` and `Sina Table` Widgets (CVSS 6.4)
• CVE-2025-49262 — WordPress Sina Extension for Elementor plugin <= 3.6.1 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.4)
• CVE-2025-1517 — Sina Extension for Elementor <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text, Countdown Widget, and Login Form Shortcodes (CVSS 5.4)
• CVE-2024-12624 — Sina Extension for Elementor <= 3.5.91 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Sina Image Differ (CVSS 5.4)
• CVE-2024-9540 — Sina Extension for Elementor <= 3.5.7 - Authenticated (Contributor+) Sensitive Information Exposure via Sina Modal Box Widget Elementor Template (CVSS 4.3)
• CVE-2024-5260 — Sina Extension for Elementor <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via read_more_text Parameter (CVSS 5.4)
• CVE-2024-5036 — Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-35703 — WordPress Sina Extension for Elementor plugin <= 3.5.3 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-34384 — WordPress Sina Extension for Elementor plugin <= 3.5.1 - Local File Inclusion vulnerability (CVSS 8.8)
• CVE-2024-4373 — Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.3 - Authenticated (Contributor+) Stored Cross-site Scriping via 'Sina Particle Layer' (CVSS 5.4)
• CVE-2024-4333 — Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.3 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting (CVSS 5.4)
• CVE-2024-3988 — Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Sina Fancy Text Widget (CVSS 5.4)
• CVE-2024-29935 — WordPress Sina Extension for Elementor plugin <= 3.5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2021-24269 — Sina Extension for Elementor < 3.3.12 - Contributor+ Stored XSS (CVSS 5.4)
• CVE-2019-15839 — (CVSS 7.5)