CVE-2024-4983 The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.0- Authenticated (Contributor+) Stored Cross-Site Scripting

🗓️ 27 Jun 2024 08:34:20Reported by WordfenceType

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘video_color’ parameter in all versions up to, and including, 5.6.0 due to insufficient input sanitization and output escaping

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress Plugin the-plus-addons-for-elementor-page-builder cross-site scripting vulnerability	27 Jun 202400:00	–	cnnvd
CVE	CVE-2024-4983	27 Jun 202408:34	–	cve
EUVD	EUVD-2024-44537	3 Oct 202520:07	–	euvd
NVD	CVE-2024-4983	27 Jun 202409:15	–	nvd
OSV	CVE-2024-4983	27 Jun 202409:15	–	osv
Patchstack	WordPress The Plus Addons for Elementor Page Builder Lite Plugin <= 5.6.0 is vulnerable to Cross Site Scripting (XSS)	27 Jun 202400:00	–	patchstack
Patchstack	WordPress The Plus Addons for Elementor plugin <= 5.6.0- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability	27 Jun 202408:29	–	patchstack
RedhatCVE	CVE-2024-4983	23 May 202509:25	–	redhatcve
Vulnrichment	CVE-2024-4983 The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.0- Authenticated (Contributor+) Stored Cross-Site Scripting	27 Jun 202408:34	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 24, 2024 to June 30, 2024)	3 Jul 202415:31	–	wordfence

[
  {
    "vendor": "posimyththemes",
    "product": "The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "5.6.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/e3f0a20b-d572-4040-b5b6-ede0aec4e2b0
plugins	www.plugins.trac.wordpress.org/changeset/3107776/
plugins	www.plugins.trac.wordpress.org/browser/the-plus-addons-for-elementor-page-builder/tags/5.5.3/modules/widgets/tp_video_player.php

08 Apr 2026 17:29Current

CVSS 3.16.4

EPSS0.0042

CWE-79