Free Theme Builder For Elementor
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:free_theme_builder_for_elementor:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Free Theme Builder For Elementor (8abcc8a4-5696-5a2b-8f8a-937f4b695831) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-11767 |
vulnerable | 2026-07-29 00:23:31.584786 |
CRT Addons for Elementor < 1.6.7 - Unauthenticated Stored XSS via Contact Form
The Free Builder for Elementor WordPress plugin before 1.6.7 does not sanitise submitted contact form field values before storing them and outputting them in the admin dashboard, allowing unauthenticated attackers to perform Stored Cross-Site Scripting attacks that execute when a logged-in administrator views the form submissions.
Published: 2026-07-21T06:00:01.191Z
Updated: 2026-07-21T15:05:36.150Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.