WordPress security by component
Zita Elementor Site Library
Plugin description
Zita Elementor Site Library is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Feb 19, 2026; the highest CVE/CNA score is 9.9.
Plugin slug:
zita-site-libraryLatest vulnerability
CVE-2026-25319: Zita Elementor Site Library: Cross-site request forgery
Zita Elementor Site Library is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
| Safe version |
|
||
|---|---|---|---|
| Feb 19, 2026 |
CVE-2026-25319
Zita Elementor Site Library: Cross-site request forgery
Zita Elementor Site Library is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Oct 16, 2024 |
CVE-2024-8921
Zita Elementor Site Library: Cross-site scripting
Zita Elementor Site Library is affected by cross-site scripting. Exploitation requires at least author-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVDPending
|
| Jul 09, 2024 |
CVE-2024-37420
Zita Elementor Site Library: Dangerous file upload
Zita Elementor Site Library is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
|
See mitigation notes |
CVE9.9
NVDPending
|