Known Vulnerabilities for Widgets by Yahoo
Listed below are 1 of the newest known vulnerabilities associated with "Widgets" by "Yahoo".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-105064 json | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Unlimited Elements Unlimi... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-103355 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements Unli... | Not Provided | 2026-10-04 | 2026-10-06 |
| CVE-2026-103344 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unli... | Not Provided | 2026-10-04 | 2026-10-05 |
| CVE-2026-103342 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unli... | Not Provided | 2026-10-03 | 2026-10-03 |
| CVE-2026-103341 json | Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) ... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103338 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements Unli... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-100899 json | A flaw has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. This impacts the function where... | Not Provided | 2026-09-28 | 2026-09-28 |
| CVE-2026-100898 json | A vulnerability was detected in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1. This affects the function... | Not Provided | 2026-09-28 | 2026-09-28 |
| CVE-2026-100180 json | The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulner... | Not Provided | 2026-10-03 | 2026-10-03 |
| CVE-2026-97348 json | The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including,... | Not Provided | 2026-10-10 | 2026-10-11 |