Cross-site Scripting

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Borderless - Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple WidgetsCVE-2024-4666visualmodo · CVSS 6.4 · 0.4% likely

   CWE-79

2. WordPress Borderless Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS)CVE-2023-38518Visualmodo · CVSS 5.9 · 0.4% likely

   CWE-79

3. Borderless – Elementor Addons and Templates <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-5290visualmodo · CVSS 6.4 · 0.3% likely

   CWE-79

4. Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg <= 1.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG UploadCVE-2024-10867visualmodo · CVSS 5.4 · 0.3% likely

   CWE-79

5. Visualmodo Elements <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadCVE-2024-11095visualmodo · CVSS 6.4 · 0.3% likely

   CWE-79

6. WordPress Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin <= 1.5.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-54211Visualmodo · CVSS 5.9 · 0.3% likely

   CWE-79

7. WordPress Borderless plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-34757Visualmodo · CVSS 6.5 · 0.3% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.