Approved changes feed: RSS · Atom

cpe:2.3:a:sinaextra:sina_extension_for_elementor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSinaextra (a23bbe3f-8c83-5dc2-a9e9-83211afa5f78)
ProductSina Extension For Elementor (0481891e-201e-573d-90be-fca07cdcb965)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/shaonsina/sina-extension-for-elementor purl2cpe 2026-06-01 10:12:38.145540

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-35703 vulnerable 2026-06-08 06:39:42.427515 WordPress Sina Extension for Elementor plugin <= 3.5.3 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SinaExtra Sina Extension for Elementor allows Stored XSS.This issue affects Sina Extension for Elementor: from n/a through 3.5.3.
Published: 2024-06-08T14:14:04.061Z
Updated: 2026-04-28T16:09:53.676Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34384 vulnerable 2026-06-08 06:37:33.208614 WordPress Sina Extension for Elementor plugin <= 3.5.1 - Local File Inclusion vulnerability
MEDIUM (6.5)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in SinaExtra Sina Extension for Elementor allows PHP Local File Inclusion.This issue affects Sina Extension for Elementor: from n/a through 3.5.1.
Published: 2024-06-04T13:17:11.193Z
Updated: 2026-04-28T16:09:47.930Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29935 vulnerable 2026-06-08 06:33:29.577469 WordPress Sina Extension for Elementor plugin <= 3.5.0 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SinaExtra Sina Extension for Elementor allows Stored XSS.This issue affects Sina Extension for Elementor: from n/a through 3.5.0.
Published: 2024-03-27T10:18:30.226Z
Updated: 2026-04-28T16:09:20.696Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.