CVEs we hold for Sonalsinha21

Records whose assigning authority named Sonalsinha21 as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-6972SKT Skill Bar <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scriptingsonalsinha21 SKT Skill Bar

CVE-2025-8564SKT Addons for Elementor <= 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgetssonalsinha21 SKT Addons for Elementor

CVE-2025-7820SKT PayPal for WooCommerce <= 1.4 - Unauthenticated Payment Bypasssonalsinha21 SKT PayPal for WooCommerce

CVE-2025-66090WordPress SKT Skill Bar plugin <= 2.5 - Cross Site Scripting (XSS) vulnerabilitysonalsinha21 SKT Skill Bar

CVE-2025-60138WordPress SKT Blocks plugin <= 2.6 - Cross Site Scripting (XSS) vulnerabilitysonalsinha21 SKT Blocks

CVE-2025-54005WordPress SKT Page Builder plugin <= 4.9 - Broken Access Control vulnerabilitysonalsinha21 SKT Page Builder

CVE-2025-48270WordPress SKT Blocks plugin <= 2.2 - Cross Site Scripting (XSS) Vulnerabilitysonalsinha21 SKT Blocks

CVE-2025-47608WordPress Recover abandoned cart for WooCommerce plugin <= 2.5 - SQL Injection Vulnerabilitysonalsinha21 Recover abandoned cart for WooCommerce

CVE-2025-47482WordPress SKT Skill Bar plugin <= 2.4 - Cross Site Scripting (XSS) Vulnerabilitysonalsinha21 SKT Skill Bar

CVE-2025-46243WordPress Recover abandoned cart for WooCommerce plugin <= 2.2 - Cross Site Request Forgery (CSRF) Vulnerabilitysonalsinha21 Recover abandoned cart for WooCommerce

CVE-2025-46235WordPress SKT Blocks – Gutenberg based Page Builder plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerabilitysonalsinha21 SKT Blocks

CVE-2025-3276SKT Blocks – Gutenberg based Page Builder <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scriptingsonalsinha21 SKT Blocks – Gutenberg based Page Builder

CVE-2025-30812WordPress SKT Addons for Elementor plugin <= 3.5 - Cross Site Scripting (XSS) vulnerabilitysonalsinha21 SKT Addons for Elementor

CVE-2025-26998WordPress SKT Blocks – Gutenberg based Page Builder plugin <= 1.8 - Cross Site Scripting (XSS) vulnerabilitysonalsinha21 SKT Blocks

CVE-2025-26880WordPress SKT Skill Bar plugin <= 2.3 - Cross Site Scripting (XSS) vulnerabilitysonalsinha21 SKT Skill Bar

CVE-2025-26771WordPress SKT Blocks plugin <= 1.7 - Cross Site Scripting (XSS) vulnerabilitysonalsinha21 SKT Blocks

CVE-2025-24535WordPress SKT Donation plugin <= 1.9 - Reflected Cross Site Scripting (XSS) vulnerabilitysonalsinha21 SKT Donation

CVE-2024-54346WordPress Barter theme <= 1.6 - Cross Site Scripting (XSS) vulnerabilitysonalsinha21 Barter

CVE-2024-54345WordPress Bicycleshop theme <= 1.5 - Cross Site Scripting (XSS) vulnerabilitysonalsinha21 Bicycleshop

CVE-2024-5091SKT Addons for Elementor <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate and Creative…sonalsinha21 SKT Addons for Elementor

CVE-2024-48036WordPress SKT Blocks plugin <= 1.6 - Cross Site Scripting (XSS) vulnerabilitysonalsinha21 SKT Blocks

CVE-2024-44007WordPress SKT Templates – Elementor & Gutenberg templates plugin <= 6.14 - Reflected Cross Site Scripting (XSS)…sonalsinha21 SKT Templates – Elementor & Gutenberg templates

CVE-2024-43995WordPress Posterity theme <= 3.6 - Cross Site Scripting (XSS) vulnerabilitysonalsinha21 Posterity

CVE-2024-37493WordPress Posterity theme <= 3.3 - Cross Site Request Forgery (CSRF) vulnerabilitysonalsinha21 Posterity

CVE-2024-13733SKT Blocks – Gutenberg based Page Builder <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scriptingsonalsinha21 SKT Blocks – Gutenberg based Page Builder

CVE-2024-13665Admire Extra <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scriptingsonalsinha21 Admire Extra

CVE-2024-1337SKT Page Builder <= 4.1 - Missing Authorization to Authenticated(Subscriber+) Content Injectionsonalsinha21 SKT Page Builder

CVE-2024-12848SKT Page Builder <= 4.6 - Authenticated (Subscriber+) Arbitrary File Uploadsonalsinha21 SKT Page Builder

CVE-2024-10693SKT Addons for Elementor <= 3.3 - Authenticated (Contributor+) Post Disclosuresonalsinha21 SKT Addons for Elementor

29 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.