SinaExtra records
14 published records for vendor sinaextra.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 28.6%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')11
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
14 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2024-34384No exploit | WordPress Sina Extension for Elementor plugin <= 3.5.1 - Local File Inclusion vulnerabilitysinaextra · sina extension for elementor · CWE-22 | High8.8 | — | 0.5% | Jun 4, 2024 |
31Monitor | CVE-2019-15839No exploit | The sina-extension-for-elementor plugin before 2.2.1 for WordPress has local file inclusion.sinaextra · sina extension for elementor · CWE-22 | High7.5 | — | 2.3% | Aug 30, 2019 |
21Monitor | CVE-2021-24269No exploit | Sina Extension for Elementor < 3.3.12 - Contributor+ Stored XSSsinaextra · sina extension for elementor · CWE-79 | Medium5.4 | — | 0.5% | May 5, 2021 |
21Monitor | CVE-2025-1517No exploit | Sina Extension for Elementor <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text, Countdown Widget, and Login Form Shortcodessinaextra · sina extension for elementor · CWE-79 | Medium5.4 | — | 0.5% | Feb 26, 2025 |
21Monitor | CVE-2024-5260No exploit | Sina Extension for Elementor <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via read_more_text Parametersinaextra · sina extension for elementor · CWE-79 | Medium5.4 | — | 0.4% | Jul 2, 2024 |
21Monitor | CVE-2024-3988No exploit | Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.2 - Authenticated (Csinaextra · sina extension for elementor · CWE-79 | Medium5.4 | — | 0.4% | Apr 25, 2024 |
21Monitor | CVE-2024-5036No exploit | Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.4 - Authenticated (Csinaextra · sina extension for elementor · CWE-79 | Medium5.4 | — | 0.3% | Jun 20, 2024 |
21Monitor | CVE-2024-4333No exploit | Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.3 - Authenticated (Csinaextra · sina extension for elementor · CWE-79 | Medium5.4 | — | 0.3% | May 14, 2024 |
21Monitor | CVE-2024-4373No exploit | Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.3 - Authenticated (Csinaextra · sina extension for elementor · CWE-79 | Medium5.4 | — | 0.3% | May 14, 2024 |
21Monitor | CVE-2024-29935No exploit | WordPress Sina Extension for Elementor plugin <= 3.5.0 - Cross Site Scripting (XSS) vulnerabilitysinaextra · sina extension for elementor · CWE-79 | Medium5.4 | — | 0.3% | Mar 27, 2024 |
21Monitor | CVE-2025-49262No exploit | WordPress Sina Extension for Elementor plugin <= 3.6.1 - Cross Site Scripting (XSS) Vulnerabilitysinaextra · sina extension for elementor · CWE-79 | Medium5.4 | — | 0.2% | Jun 6, 2025 |
21Monitor | CVE-2024-12624No exploit | Sina Extension for Elementor <= 3.5.91 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Sina Image Differsinaextra · sina extension for elementor · CWE-79 | Medium5.4 | — | 0.2% | Jan 7, 2025 |
21Monitor | CVE-2024-35703No exploit | WordPress Sina Extension for Elementor plugin <= 3.5.3 - Cross Site Scripting (XSS) vulnerabilitysinaextra · sina extension for elementor · CWE-79 | Medium5.4 | — | 0.2% | Jun 8, 2024 |
17Monitor | CVE-2024-9540No exploit | Sina Extension for Elementor <= 3.5.7 - Authenticated (Contributor+) Sensitive Information Exposure via Sina Modal Box Widget Elementor Templatesinaextra · sina extension for elementor · CWE-200 | Medium4.3 | — | 0.4% | Oct 16, 2024 |
- CVE-2024-3438435Monitor
WordPress Sina Extension for Elementor plugin <= 3.5.1 - Local File Inclusion vulnerability
HighCVSS 8.8No exploitEPSS 0%sinaextra · sina extension for elementorJun 4, 2024
- CVE-2019-1583931Monitor
The sina-extension-for-elementor plugin before 2.2.1 for WordPress has local file inclusion.
HighCVSS 7.5No exploitEPSS 2%sinaextra · sina extension for elementorAug 30, 2019
- CVE-2021-2426921Monitor
Sina Extension for Elementor < 3.3.12 - Contributor+ Stored XSS
MediumCVSS 5.4No exploitEPSS 0%sinaextra · sina extension for elementorMay 5, 2021
- CVE-2025-151721Monitor
Sina Extension for Elementor <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text, Countdown Widget, and Login Form Shortcodes
MediumCVSS 5.4No exploitEPSS 0%sinaextra · sina extension for elementorFeb 26, 2025
- CVE-2024-526021Monitor
Sina Extension for Elementor <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via read_more_text Parameter
MediumCVSS 5.4No exploitEPSS 0%sinaextra · sina extension for elementorJul 2, 2024
- CVE-2024-398821Monitor
Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.2 - Authenticated (C
MediumCVSS 5.4No exploitEPSS 0%sinaextra · sina extension for elementorApr 25, 2024
- CVE-2024-503621Monitor
Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.4 - Authenticated (C
MediumCVSS 5.4No exploitEPSS 0%sinaextra · sina extension for elementorJun 20, 2024
- CVE-2024-433321Monitor
Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.3 - Authenticated (C
MediumCVSS 5.4No exploitEPSS 0%sinaextra · sina extension for elementorMay 14, 2024
- CVE-2024-437321Monitor
Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.3 - Authenticated (C
MediumCVSS 5.4No exploitEPSS 0%sinaextra · sina extension for elementorMay 14, 2024
- CVE-2024-2993521Monitor
WordPress Sina Extension for Elementor plugin <= 3.5.0 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%sinaextra · sina extension for elementorMar 27, 2024
- CVE-2025-4926221Monitor
WordPress Sina Extension for Elementor plugin <= 3.6.1 - Cross Site Scripting (XSS) Vulnerability
MediumCVSS 5.4No exploitEPSS 0%sinaextra · sina extension for elementorJun 6, 2025
- CVE-2024-1262421Monitor
Sina Extension for Elementor <= 3.5.91 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Sina Image Differ
MediumCVSS 5.4No exploitEPSS 0%sinaextra · sina extension for elementorJan 7, 2025
- CVE-2024-3570321Monitor
WordPress Sina Extension for Elementor plugin <= 3.5.3 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%sinaextra · sina extension for elementorJun 8, 2024
- CVE-2024-954017Monitor
Sina Extension for Elementor <= 3.5.7 - Authenticated (Contributor+) Sensitive Information Exposure via Sina Modal Box Widget Elementor Template
MediumCVSS 4.3No exploitEPSS 0%sinaextra · sina extension for elementorOct 16, 2024