Lucene search

CVE-2024-34570

🗓️ 08 May 2024 11:25:15Reported by PatchstackType

Improper input neutralization vulnerability in Xpro Elementor Addon

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
WPVulnDB	140+ Widgets \| Best Addons For Elementor – FREE < 1.4.3.1 - Authenticated (Admin+) Cross Site Scripting	15 May 202400:00	–	wpvulndb
Vulnrichment	CVE-2024-34570 WordPress Xpro Elementor Addons plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability	8 May 202410:37	–	vulnrichment
Cvelist	CVE-2024-34570 WordPress Xpro Elementor Addons plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability	8 May 202410:37	–	cvelist
Patchstack	WordPress Xpro Elementor Addons Plugin <= 1.4.3.1 is vulnerable to Cross Site Scripting (XSS)	7 May 202400:00	–	patchstack
NVD	CVE-2024-34570	8 May 202411:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (May 6, 2024 to May 12, 2024)	16 May 202413:04	–	wordfence

Nvd

Vulners

Node

wpxpro xpro_addons_for_elementorRange<1.4.3.1wordpress

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "xpro-elementor-addons",
    "product": "Xpro Elementor Addons",
    "vendor": "Xpro",
    "versions": [
      {
        "lessThanOrEqual": "1.4.3",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/xpro-elementor-addons/wordpress-xpro-elementor-addons-plugin-1-4-3-cross-site-scripting-xss-vulnerability

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 May 2024 11:15Current

6.6Medium risk

Vulners AI Score6.6

CVSS34.8 - 5.9

EPSS0.00067

SSVC

CWE-79