WordPress The Plus Addons for Elementor Pro plugin <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Title Widget vulnerability

🗓️ 29 May 2024 23:57:50Reported by wesley (wcraft)Type

Authenticated stored cross-site scripting in The Plus Addons for Elementor Pro up to version 5.5.4 via the Heading Title Widget.

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2024-5341	30 May 202406:15	–	attackerkb
CNNVD	WordPress plugin The Plus Addons for Elementor Page Builder 安全漏洞	30 May 202400:00	–	cnnvd
CVE	CVE-2024-5341	30 May 202405:33	–	cve
Cvelist	CVE-2024-5341 The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Title Widget	30 May 202405:33	–	cvelist
EUVD	EUVD-2024-46566	3 Oct 202520:07	–	euvd
NVD	CVE-2024-5341	30 May 202406:15	–	nvd
Patchstack	WordPress The Plus Addons for Elementor Pro Plugin <= 5.5.4 is vulnerable to Cross Site Scripting (XSS)	29 May 202400:00	–	patchstack
Positive Technologies	PT-2024-35733 · WordPress · The Plus Addons For Elementor Page Builder	30 May 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-5341	23 May 202509:10	–	redhatcve
Vulnrichment	CVE-2024-5341 The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Title Widget	30 May 202405:33	–	vulnrichment

Vulners

Node

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/theplus_elementor_addon/the-plus-addons-for-elementor-elementor-addons-page-templates-widgets-mega-menu-woocommerce-554-authenticated-contributor-stored-cross-site-scripting-via-head

29 May 2024 23:57Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.4 - 6.4

EPSS0.00374

SSVC