Lucene search

CVE-2024-6283

🗓️ 27 Jun 2024 05:51:15Reported by WordfenceType

The DethemeKit For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to 2.1.5 due to insufficient input sanitization and output escaping

Reporter	Title	Published	Views	Family All 5
Patchstack	WordPress DethemeKit For Elementor Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)	27 Jun 202400:00	–	patchstack
NVD	CVE-2024-6283	27 Jun 202405:15	–	nvd
Cvelist	CVE-2024-6283 DethemeKit For Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via URL Parameter of the De Gallery Widget	27 Jun 202404:38	–	cvelist
Vulnrichment	CVE-2024-6283 DethemeKit For Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via URL Parameter of the De Gallery Widget	27 Jun 202404:38	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 24, 2024 to June 30, 2024)	3 Jul 202415:31	–	wordfence

Nvd

Vulners

Node

detheme dethemekit_for_elementorRange<2.1.6wordpress

[
  {
    "vendor": "detheme",
    "product": "DethemeKit For Elementor",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "2.1.5",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/dethemekit-for-elementor/trunk/widgets/dethemekit-grid.php
plugins	www.plugins.trac.wordpress.org/browser/dethemekit-for-elementor/trunk/widgets/dethemekit-grid.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/9b2083f9-79d0-43f6-b7ae-a5817dc561b0

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Jun 2024 05:15Current

5.3Medium risk

Vulners AI Score5.3

CVSS35.4

EPSS0.00123

SSVC

CWE-79