WordPress Master Addons for Elementor plugin <= 1.8.1 - Reflected Cross-Site Scripting (XSS) vulnerability

2022-02-2100:00:00

Krzysztof Zając

patchstack.com

0.001 Low

EPSS

Percentile

44.3%

Reflected Cross-Site Scripting (XSS) vulnerability discovered by Krzysztof Zając in WordPress Master Addons for Elementor plugin (versions <= 1.8.1).

Solution

           Update the WordPress Master Addons for Elementor plugin to the latest available version (at least 1.8.2).

CPENameOperatorVersion
master addons for elementorle1.8.1

CPE	Name	Operator	Version
	master addons for elementor	le	1.8.1

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0327

wordpress.org/plugins/master-addons/#developers

wpscan.com/vulnerability/df38cc99-da3c-4cc0-b179-1e52e841b883

0.001 Low

EPSS

Percentile

44.3%

Related for PATCHSTACK:CEBCFD309AACFDE3D0CF611F833A2BEE