CVE-2024-9068

🗓️ 25 Sep 2024 02:05:10Reported by WordfenceType

The OneElements – Best Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping. Authenticated attackers with Author-level access can inject arbitrary web scripts

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-9068	25 Sep 202405:57	–	circl
CNNVD	WordPress plugin OneElements 跨站脚本漏洞	25 Sep 202400:00	–	cnnvd
Cvelist	CVE-2024-9068 OneElements – Best Elementor Addons <= 1.3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	25 Sep 202402:05	–	cvelist
EUVD	EUVD-2024-49704	3 Oct 202520:07	–	euvd
NVD	CVE-2024-9068	25 Sep 202403:15	–	nvd
Patchstack	WordPress OneElements – Best Elementor Addons plugin <= 1.3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability	24 Sep 202412:53	–	patchstack
Patchstack	WordPress OneElements – Best Elementor Addons Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS)	24 Sep 202400:00	–	patchstack
Positive Technologies	PT-2024-39403 · WordPress · The Oneelements – Best Elementor Addons	24 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-9068	23 May 202510:35	–	redhatcve
Vulnrichment	CVE-2024-9068 OneElements – Best Elementor Addons <= 1.3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	25 Sep 202402:05	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

themexclub oneelementsRange≤1.3.7wordpress

[
  {
    "vendor": "themexclub",
    "product": "OneElements – Best Elementor Addons",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.3.7",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/3f83a514-2b42-4348-9525-438205daeeab
wordpress	www.wordpress.org/plugins/oneelements-ultimate-addons-for-elementor/

08 Apr 2026 16:48Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.15.4 - 6.4

EPSS0.00196

SSVC

CWE-79