Threat Entry Updated 2026-02-19

CVE-2026-25319 - Zita Elementor Site Library Plugin

Cross-Site Request Forgery (CSRF) vulnerability in wpzita Zita Elementor Site Library zita-site-library allows Cross Site Request Forgery.This issue affects Zita Elementor Site Library: from n/a through

PLUGIN Zita Elementor Site Library

CVE-2026-25319

MEDIUM CVSS 4.3 2026-02-19

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-10-16

CVE-2024-8921 - Zita Elementor Site Library Plugin

The Zita Elementor Site Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.

PLUGIN Zita Elementor Site Library

CVE-2024-8921

MEDIUM CVSS 6.4 2024-10-16

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2024-3249 - Zita Elementor Site Library Plugin

The Zita Elementor Site Library plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the import_xml_data, xml_data_import, import_option_data, import_widgets, and import_customizer_settings functions in all versions up to, and including, 1.6.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to create pages, update certain options, including WooCommerce page titles and Elementor settings, import widgets, and update the plugin's customizer settings and the WordPress custom CSS. NOTE: This vulnerability was partially fixed in version 1.6.2.

PLUGIN Zita Elementor Site Library

CVE-2024-3249

MEDIUM CVSS 4.3 2024-06-25

Risk Score

Open Full Technical Breakdown