{"schemaVersion":3,"id":"CVE-2024-5647","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups library (version 1.1.0) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. NOTE: This vulnerability was fixed in the upstream library (Magnific Popups version 1.2.0) by disabling the loading of HTML within certain fields by default.","dates":{"published":"2025-07-03T09:22:19.308Z","modified":"2026-08-25T19:06:26.772Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.4,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"wordfence","score":6.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00357,"percentile":0.28015,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.04599999999999999,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00311},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00311,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00311,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00311,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00311,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00311,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00311,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00311,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00311,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00311,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00357,"percentile":0.28015}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00311,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00311,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00311,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0033,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00354,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00357,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00357,"percentile":0.28015}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/79.html"}],"affected":[{"vendor":"badhonrocks","product":"divi torque lite","name":"Divi Torque Lite","label":"divi torque lite","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 4.0.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 4.0.5","eol":null,"hubHref":"/vendor/badhonrocks/divi_torque_lite"},{"vendor":"blossomthemes","product":"blossomthemes social feed","name":"BlossomThemes Social Feed","label":"blossomthemes social feed","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.0.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.0.5","eol":null,"hubHref":"/vendor/blossomthemes/blossomthemes_social_feed"},{"vendor":"boldthemes","product":"bold page builder","name":"Bold Page Builder","label":"bold page builder","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 5.1.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 5.1.2","eol":null,"hubHref":"/vendor/boldthemes/bold_page_builder"},{"vendor":"divisupreme","product":"supreme modules lite – divi theme, extra theme and divi builder","name":"Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder","label":"supreme modules lite – divi theme, extra theme and divi builder","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.5.52","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.5.52","eol":null,"hubHref":"/vendor/divisupreme/supreme_modules_lite_-_divi_theme_extra_theme_and_divi_builder"},{"vendor":"elegant themes","product":"divi","name":"Divi","label":"divi","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 4.27.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 4.27.1","eol":null,"hubHref":"/vendor/elegant_themes/divi"},{"vendor":"elegant themes","product":"divi builder","name":"Divi Builder","label":"divi builder","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 4.27.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 4.27.1","eol":null,"hubHref":"/vendor/elegant_themes/divi_builder"},{"vendor":"elegant themes","product":"divi extra","name":"Divi Extra","label":"divi extra","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 4.27.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 4.27.1","eol":null,"hubHref":"/vendor/elegant_themes/divi_extra"},{"vendor":"gn_themes","product":"shortcodes ultimate – content elements","name":"Shortcodes Ultimate – Content Elements","label":"shortcodes ultimate – content elements","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 7.4.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 7.4.2","eol":null,"hubHref":"/vendor/gn_themes/shortcodes_ultimate_-_content_elements"},{"vendor":"gutentor","product":"gutentor – gutenberg blocks – page builder for gutenberg editor","name":"Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor","label":"gutentor – gutenberg blocks – page builder for gutenberg editor","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.4.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 3.4.9","eol":null,"hubHref":"/vendor/gutentor/gutentor_-_gutenberg_blocks_-_page_builder_for_gutenberg_editor"},{"vendor":"leevio","product":"happy_addons_for_elementor","name":"happy addons for elementor","label":"happy_addons_for_elementor","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.12.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 3.12.2","eol":null,"hubHref":"/vendor/leevio/happy_addons_for_elementor"},{"vendor":"muffingroup","product":"betheme","name":"betheme","label":"betheme","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 28.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 28.4","eol":null,"hubHref":"/vendor/muffingroup/betheme"},{"vendor":"oceanwp","product":"oceanwp","name":"oceanwp","label":"oceanwp","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 3.6.0","eol":null,"hubHref":"/vendor/oceanwp/oceanwp"},{"vendor":"robosoft","product":"robo gallery – photo & image slider","name":"Robo Gallery – Photo & Image Slider","label":"robo gallery – photo & image slider","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.2.22","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 3.2.22","eol":null,"hubHref":"/vendor/robosoft/robo_gallery_-_photo__image_slider"},{"vendor":"sayful","product":"carousel slider","name":"Carousel Slider","label":"carousel slider","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.2.14","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.2.14","eol":null,"hubHref":"/vendor/sayful/carousel_slider"},{"vendor":"wordpress","product":"addons-for-divi","name":"Divi Torque Lite","label":"addons-for-divi","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 4.0.5 (fixed in 4.0.6)","noFixRecorded":false,"fixedIn":"4.0.6"}],"versionsText":"≤ 4.0.5 (fixed in 4.0.6)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"blossomthemes-instagram-feed","name":"BlossomThemes Social Feed","label":"blossomthemes-instagram-feed","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.0.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.0.5","eol":null,"hubHref":null},{"vendor":"wordpress","product":"bold-page-builder","name":"Bold Page Builder","label":"bold-page-builder","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 5.1.2 (fixed in 5.1.3)","noFixRecorded":false,"fixedIn":"5.1.3"}],"versionsText":"≤ 5.1.2 (fixed in 5.1.3)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"carousel-slider","name":"Carousel Slider","label":"carousel-slider","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.2.14 (fixed in 2.2.15)","noFixRecorded":false,"fixedIn":"2.2.15"}],"versionsText":"≤ 2.2.14 (fixed in 2.2.15)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"divi-builder","name":"Divi Builder","label":"divi-builder","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 4.27.1 (fixed in 4.27.2)","noFixRecorded":false,"fixedIn":"4.27.2"}],"versionsText":"≤ 4.27.1 (fixed in 4.27.2)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"essential-addons-for-elementor-lite","name":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","label":"essential-addons-for-elementor-lite","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 6.0.4 (fixed in 6.0.5)","noFixRecorded":false,"fixedIn":"6.0.5"}],"versionsText":"≤ 6.0.4 (fixed in 6.0.5)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"gutentor","name":"Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor","label":"gutentor","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.4.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 3.4.9","eol":null,"hubHref":null},{"vendor":"wordpress","product":"happy-elementor-addons","name":"HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates","label":"happy-elementor-addons","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.12.2 (fixed in 3.12.3)","noFixRecorded":false,"fixedIn":"3.12.3"}],"versionsText":"≤ 3.12.2 (fixed in 3.12.3)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"robo-gallery","name":"Robo Gallery – Photo & Image Slider","label":"robo-gallery","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.2.22 (fixed in 3.2.23)","noFixRecorded":false,"fixedIn":"3.2.23"}],"versionsText":"≤ 3.2.22 (fixed in 3.2.23)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"shortcodes-ultimate","name":"Shortcodes Ultimate – Content Elements","label":"shortcodes-ultimate","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 7.4.2 (fixed in 7.4.3)","noFixRecorded":false,"fixedIn":"7.4.3"}],"versionsText":"≤ 7.4.2 (fixed in 7.4.3)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"supreme-modules-for-divi","name":"Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder","label":"supreme-modules-for-divi","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.5.52 (fixed in 2.5.53)","noFixRecorded":false,"fixedIn":"2.5.53"}],"versionsText":"≤ 2.5.52 (fixed in 2.5.53)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"betheme","name":"Betheme","label":"betheme","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 28.4 (fixed in 28.4.1)","noFixRecorded":false,"fixedIn":"28.4.1"}],"versionsText":"≤ 28.4 (fixed in 28.4.1)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"divi","name":"Divi","label":"divi","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 4.27.1 (fixed in 4.27.2)","noFixRecorded":false,"fixedIn":"4.27.2"}],"versionsText":"≤ 4.27.1 (fixed in 4.27.2)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"extra","name":"Divi Extra","label":"extra","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 4.27.1 (fixed in 4.27.2)","noFixRecorded":false,"fixedIn":"4.27.2"}],"versionsText":"≤ 4.27.1 (fixed in 4.27.2)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"oceanwp","name":"OceanWP","label":"oceanwp","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.6.0 (fixed in 3.6.1)","noFixRecorded":false,"fixedIn":"3.6.1"}],"versionsText":"≤ 3.6.0 (fixed in 3.6.1)","eol":null,"hubHref":null},{"vendor":"wpdevteam","product":"essential addons for elementor – popular elementor templates & widgets","name":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","label":"essential addons for elementor – popular elementor templates & widgets","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 6.0.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 6.0.4","eol":null,"hubHref":"/vendor/wpdevteam/essential_addons_for_elementor_-_popular_elementor_templates__widgets"}],"affectedCount":30,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dae80fc2-3076-4a32-876d-5df1c62de9bd?source=cve","label":"www.wordfence.com/threat-intel/vulnerabilities/id/dae80fc2-3076-4a32-876d-5df1c62de9bd?source=cve","hostname":"www.wordfence.com","tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/shortcodes-ultimate/trunk/vendor/magnific-popup/magnific-popup.js","label":"plugins.trac.wordpress.org/browser/shortcodes-ultimate/trunk/vendor/magnific-popup/magnific-popup.js","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/essential-addons-for-elementor-lite/trunk/assets/front-end/js/lib-view/magnific-popup/jquery.magnific-popup.js","label":"plugins.trac.wordpress.org/browser/…","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/bold-page-builder/trunk/content_elements_misc/js/jquery.magnific-popup.js","label":"plugins.trac.wordpress.org/browser/…","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset/3154460/happy-elementor-addons","label":"plugins.trac.wordpress.org/changeset/3154460/happy-elementor-addons","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset/3153781/bold-page-builder","label":"plugins.trac.wordpress.org/changeset/3153781/bold-page-builder","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/robo-gallery/trunk/js/robo_gallery.js#L56","label":"plugins.trac.wordpress.org/browser/robo-gallery/trunk/js/robo_gallery.js","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://www.elegantthemes.com/api/changelog/divi.txt","label":"www.elegantthemes.com/api/changelog/divi.txt","hostname":"www.elegantthemes.com","tags":[]},{"url":"https://www.elegantthemes.com/api/changelog/extra.txt","label":"www.elegantthemes.com/api/changelog/extra.txt","hostname":"www.elegantthemes.com","tags":[]},{"url":"https://www.elegantthemes.com/api/changelog/divi-builder.txt","label":"www.elegantthemes.com/api/changelog/divi-builder.txt","hostname":"www.elegantthemes.com","tags":[]},{"url":"https://themes.trac.wordpress.org/changeset/244604/oceanwp","label":"themes.trac.wordpress.org/changeset/244604/oceanwp","hostname":"themes.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset/3153700/essential-addons-for-elementor-lite","label":"plugins.trac.wordpress.org/changeset/3153700/essential-addons-for-elementor-lite","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset/3184626/addons-for-divi","label":"plugins.trac.wordpress.org/changeset/3184626/addons-for-divi","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset/3201991/robo-gallery","label":"plugins.trac.wordpress.org/changeset/3201991/robo-gallery","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset/3166204/carousel-slider","label":"plugins.trac.wordpress.org/changeset/3166204/carousel-slider","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://github.com/dimsemenov/Magnific-Popup/releases/tag/1.2.0","label":"github.com/dimsemenov/Magnific-Popup/releases/tag/1.2.0","hostname":"github.com","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset/3328729/shortcodes-ultimate","label":"plugins.trac.wordpress.org/changeset/3328729/shortcodes-ultimate","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://support.muffingroup.com/changelog/","label":"support.muffingroup.com/changelog/","hostname":"support.muffingroup.com","tags":[]},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dae80fc2-3076-4a32-876d-5df1c62de9bd","label":"www.wordfence.com/threat-intel/vulnerabilities/id/dae80fc2-3076-4a32-876d-5df1c62de9bd","hostname":"www.wordfence.com","tags":["Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2025-07-03T09:22:19.308Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-25T19:06:26.772Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":26,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T14:26:08.072Z","stale":false,"partial":false}}