WordPress Essential Addons for Elementor plugin <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget vulnerability

🗓️ 11 Sep 2024 23:11:50Reported by Robert DeVoreType

Authenticated stored cross-site scripting in WordPress Essential Addons for Elementor version 6.0.3 or lower via Fancy Text Widget.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-8440	11 Sep 202410:19	–	circl
CNNVD	WordPress plugin Essential Addons for Elementor 跨站脚本漏洞	11 Sep 202400:00	–	cnnvd
CVE	CVE-2024-8440	11 Sep 202406:42	–	cve
Cvelist	CVE-2024-8440 Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget	11 Sep 202406:42	–	cvelist
EUVD	EUVD-2024-49177	3 Oct 202520:07	–	euvd
NVD	CVE-2024-8440	11 Sep 202407:15	–	nvd
Patchstack	WordPress Essential Addons for Elementor Plugin <= 6.0.3 is vulnerable to Cross Site Scripting (XSS)	11 Sep 202400:00	–	patchstack
Positive Technologies	PT-2024-39015	11 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-8440	23 May 202510:32	–	redhatcve
Vulnrichment	CVE-2024-8440 Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget	11 Sep 202406:42	–	vulnrichment

Vulners

Node

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/essential-addons-for-elementor-lite/essential-addons-for-elementor-best-elementor-templates-widgets-kits-woocommerce-builders-603-authenticated-contributor-stored-cross-site-scripting-via-fancy-text-widget

11 Sep 2024 23:11Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.4 - 6.4

EPSS0.00354

SSVC