PT-2024-39015

🗓️ 11 Sep 2024 00:00:00Reported by Positive TechnologiesType

Stored Cross-Site Scripting vulnerability in Essential Addons for Elementor plugin versions up to 6.0.3

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-8440	11 Sep 202410:19	–	circl
CNNVD	WordPress plugin Essential Addons for Elementor 跨站脚本漏洞	11 Sep 202400:00	–	cnnvd
CVE	CVE-2024-8440	11 Sep 202406:42	–	cve
Cvelist	CVE-2024-8440 Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget	11 Sep 202406:42	–	cvelist
EUVD	EUVD-2024-49177	3 Oct 202520:07	–	euvd
NVD	CVE-2024-8440	11 Sep 202407:15	–	nvd
Patchstack	WordPress Essential Addons for Elementor Plugin <= 6.0.3 is vulnerable to Cross Site Scripting (XSS)	11 Sep 202400:00	–	patchstack
Patchstack	WordPress Essential Addons for Elementor plugin <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget vulnerability	11 Sep 202423:11	–	patchstack
RedhatCVE	CVE-2024-8440	23 May 202510:32	–	redhatcve
Vulnrichment	CVE-2024-8440 Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget	11 Sep 202406:42	–	vulnrichment

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/c5960396-5320-4978-aa82-2e33700daa43
plugins	www.plugins.trac.wordpress.org/changeset/3148624
twitter	www.twitter.com/deviorobert/status/1921224460914335962
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
plugins	www.plugins.trac.wordpress.org/browser/essential-addons-for-elementor-lite/trunk/includes/Elements/Fancy_Text.php
twitter	www.twitter.com/oktsec/status/1833781082707091786
twitter	www.twitter.com/deviorobert/status/1920830614380703788
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-8440
twitter	www.twitter.com/CVEnew/status/1833775317020020757
reddit	www.reddit.com/r/CVEWatch/comments/1n5kq6z/top_10_trending_cves_01092025

01 Sep 2025 00:00Current

5.1Medium risk

Vulners AI Score5.1

CVSS 3.15.4 - 6.4

EPSS0.00354

SSVC