PT-2024-35741 · WordPress · The Plus Addons For Elementor Page Builder

🗓️ 20 Jun 2024 00:00:00Reported by Positive TechnologiesType

Reflected XSS in Plus Addons WP Login & Register widget for WordPress up to 5.5.6 via forgoturl; attackers can inject scripts.

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress plugin The Plus Addons for Elementor Page Builder security vulnerability	21 Jun 202400:00	–	cnnvd
CVE	CVE-2024-5344	21 Jun 202402:05	–	cve
Cvelist	CVE-2024-5344 The Plus Addons for Elementor Page Builder <= 5.5.6 - Reflected Cross-Site Scripting via WP Login and Register Widget	21 Jun 202402:05	–	cvelist
EUVD	EUVD-2024-46569	3 Oct 202520:07	–	euvd
NVD	CVE-2024-5344	21 Jun 202402:15	–	nvd
Patchstack	WordPress The Plus Addons for Elementor Page Builder plugin <= 5.5.6 - Reflected Cross-Site Scripting vulnerability	20 Jun 202417:28	–	patchstack
Patchstack	WordPress The Plus Addons for Elementor Pro Plugin <= 5.5.6 is vulnerable to Cross Site Scripting (XSS)	20 Jun 202400:00	–	patchstack
RedhatCVE	CVE-2024-5344	23 May 202509:28	–	redhatcve
Vulnrichment	CVE-2024-5344 The Plus Addons for Elementor Page Builder <= 5.5.6 - Reflected Cross-Site Scripting via WP Login and Register Widget	21 Jun 202402:05	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 17, 2024 to June 23, 2024)	27 Jun 202415:00	–	wordfence

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-5344
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/1ac8fb0b-21a9-4b94-bb24-b349a7fe3305
twitter	www.twitter.com/CVEnew/status/1803994453314597372
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
roadmap	www.roadmap.theplusaddons.com/updates
t	www.t.me/cvenotify/83958
t	www.t.me/cvenotify/86456

17 Jul 2024 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.1

EPSS0.01302

SSVC