CVE-2024-5344 The Plus Addons for Elementor Page Builder <= 5.5.6 - Reflected Cross-Site Scripting via WP Login and Register Widget

🗓️ 21 Jun 2024 02:05:40Reported by WordfenceType

The Plus Addons for Elementor Page Builder plugin v5.5.6 Reflected Cross-Site Scripting vulnerabilit

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress plugin The Plus Addons for Elementor Page Builder security vulnerability	21 Jun 202400:00	–	cnnvd
CVE	CVE-2024-5344	21 Jun 202402:05	–	cve
EUVD	EUVD-2024-46569	3 Oct 202520:07	–	euvd
NVD	CVE-2024-5344	21 Jun 202402:15	–	nvd
Patchstack	WordPress The Plus Addons for Elementor Page Builder plugin <= 5.5.6 - Reflected Cross-Site Scripting vulnerability	20 Jun 202417:28	–	patchstack
Patchstack	WordPress The Plus Addons for Elementor Pro Plugin <= 5.5.6 is vulnerable to Cross Site Scripting (XSS)	20 Jun 202400:00	–	patchstack
Positive Technologies	PT-2024-35741 · WordPress · The Plus Addons For Elementor Page Builder	20 Jun 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-5344	23 May 202509:28	–	redhatcve
Vulnrichment	CVE-2024-5344 The Plus Addons for Elementor Page Builder <= 5.5.6 - Reflected Cross-Site Scripting via WP Login and Register Widget	21 Jun 202402:05	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 17, 2024 to June 23, 2024)	27 Jun 202415:00	–	wordfence

[
  {
    "vendor": "posimyththemes",
    "product": "The Plus Addons for Elementor Page Builder Pro",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "5.5.6",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/1ac8fb0b-21a9-4b94-bb24-b349a7fe3305
roadmap	www.roadmap.theplusaddons.com/updates/

08 Apr 2026 16:38Current

CVSS 3.16.1

EPSS0.01302

CWE-79