CVE-2024-4615

🗓️ 13 Jun 2024 08:16:23Reported by [email protected]Type

The Elespare – Blog, Magazine and Newspaper Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting

Reporter	Title	Published	Views	Family All 11
CNNVD	WordPress plugin Elespare security vulnerability	13 Jun 202400:00	–	cnnvd
CVE	CVE-2024-4615	13 Jun 202407:31	–	cve
Cvelist	CVE-2024-4615 Elespare – Blog, Magazine and Newspaper Addons for Elementor with Templates, Widgets, Kits, and Header/Footer Builder. One Click Import: No Coding Required! <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Horizontal Nav Menu Widget	13 Jun 202407:31	–	cvelist
EUVD	EUVD-2024-44223	3 Oct 202520:07	–	euvd
OSV	CVE-2024-4615	13 Jun 202408:16	–	osv
Patchstack	WordPress Elespare Plugin <= 3.1.2 is vulnerable to Cross Site Scripting (XSS)	13 Jun 202400:00	–	patchstack
Patchstack	WordPress Elespare plugin <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Horizontal Nav Menu Widget vulnerability	13 Jun 202409:33	–	patchstack
RedhatCVE	CVE-2024-4615	23 May 202509:12	–	redhatcve
Vulnrichment	CVE-2024-4615 Elespare – Blog, Magazine and Newspaper Addons for Elementor with Templates, Widgets, Kits, and Header/Footer Builder. One Click Import: No Coding Required! <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Horizontal Nav Menu Widget	13 Jun 202407:31	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 10, 2024 to June 16, 2024)	20 Jun 202413:40	–	wordfence

NVD

Node

elespare elespareRange≤3.1.2wordpress

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/elespare/trunk/src/widgets/nav-menu-horizontal/widget.php
plugins	www.plugins.trac.wordpress.org/changeset/3104346
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/97a1ab2f-b531-46a7-ad51-a652fc078212

08 Apr 2026 18:21Current

CVSS 3.15.4 - 6.4

EPSS0.01221