Lucene search

CVE-2024-4634

🗓️ 16 May 2024 11:49:15Reported by [email protected]Type

The Elementor Header & Footer Builder plugin for WordPress has a Stored Cross-Site Scripting vulnerability in versions up to 1.6.28

Reporter	Title	Published	Views	Family All 6
Patchstack	WordPress Elementor – Header, Footer & Blocks Template Plugin <= 1.6.28 is vulnerable to Cross Site Scripting (XSS)	16 May 202400:00	–	patchstack
CVE	CVE-2024-4634	16 May 202411:15	–	cve
Vulnrichment	CVE-2024-4634 Elementor Header & Footer Builder <= 1.6.28 - Authenticated (Contributor+) Stored Cross-Site Scripting	16 May 202411:05	–	vulnrichment
Cvelist	CVE-2024-4634 Elementor Header & Footer Builder <= 1.6.28 - Authenticated (Contributor+) Stored Cross-Site Scripting	16 May 202411:05	–	cvelist
WPVulnDB	Elementor Header & Footer Builder < 1.6.29 - Authenticated (Contributor+) Stored Cross-Site Scripting	17 May 202400:00	–	wpvulndb
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (May 13, 2024 to May 19, 2024)	23 May 202415:00	–	wordfence

Nvd

Node

brainstormforce elementor_header_\&_footer_builderRange<1.6.29wordpress

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3086402/
plugins	www.plugins.trac.wordpress.org/browser/header-footer-elementor/tags/1.6.28/inc/widgets-manager/class-widgets-loader.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/f44bb823-bbf3-413b-82b5-a351609270bf

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 May 2024 11:15Current

5.9Medium risk

Vulners AI Score5.9

CVSS35.4

EPSS0.00053

CWE-79