CVE-2024-51852

CVE-2024-51852 describes a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin Dynamic Post Grid Elementor Addon (affected versions 1.0.6 and earlier). The root cause is improper input neutralization during web page generation, enabling injection and execution of script in the vi...

CVE-2024-51870 WordPress Ultimate Flipbox Addon for Elementor plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dragwyb Ultimate Flipbox Addon for Elementor ultimate-flipbox-addon-for-elementor allows Stored XSS.This issue affects Ultimate Flipbox Addon for Elementor: from n/a through 1.0.4...

CVE-2024-51870

CVE-2024-51870 corresponds to a stored cross‑site scripting (XSS) vulnerability in the WordPress plugin “Ultimate Flipbox Addon for Elementor.” Affected: Ultimate Flipbox Addon for Elementor versions up to 1.0.4 (auth required). Root cause: improper neutralization of user input during web page ge...

CVE-2024-51870 WordPress Ultimate Flipbox Addon for Elementor plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aniketji007 Ultimate Flipbox Addon for Elementor allows Stored XSS.This issue affects Ultimate Flipbox Addon for Elementor: from n/a through .4...

CVE-2024-51938 WordPress Charity Addon for Elementor plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicheaddons Charity Addon for Elementor charity-addon-for-elementor allows DOM-Based XSS.This issue affects Charity Addon for Elementor: from n/a through = 1.3.2...

CVE-2024-51938

CVE-2024-51938 is an XSS vulnerability in the WordPress plugin Charity Addon for Elementor . Multiple sources confirm it is an improper input neutralization during web page generation, enabling a DOM-based XSS vector. Affected versions are listed as

CVE-2024-51938 WordPress Charity Addon for Elementor plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NicheAddons Charity Addon for Elementor allows DOM-Based XSS.This issue affects Charity Addon for Elementor: from n/a through 1.3.2...

WordPress plugin Pro Addons For Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress plugin Ultimate Flipbox Addon for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

PT-2024-35000 · Elementor · Ultimate Flipbox Addon For Elementor

Name of the Vulnerable Software and Affected Versions: Ultimate Flipbox Addon for Elementor versions 1.0.3 and earlier Description: The issue affects the Ultimate Flipbox Addon for Elementor, allowing Stored XSS due to improper neutralization of input during web page generation. This is a critica...

WordPress plugin Dynamic Post Grid Elementor Addon 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

PT-2024-34981 · Elementor · Dynamic Post Grid Elementor Addon

Name of the Vulnerable Software and Affected Versions: Dynamic Post Grid Elementor Addon versions 1.0.0 through 1.0.6 Description: The issue affects the Dynamic Post Grid Elementor Addon, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This is a...

WordPress plugin Charity Addon for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Exploit for CVE-2024-9935

CVE-2024-9935 PDF Generator Addon for Elementor Page Builder...

PT-2024-35265 · Elementor · Drozd – Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Drozd – Addons for Elementor versions 1.1.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

CVE-2024-9935

The PDF Generator Addon for Elementor Page Builder plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.0.0 via the rtwpgaepbdwnldpdf function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which...

WordPress plugin PDF Generator Addon for Elementor Page Builder 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. WordPress plugin is an application plug-in. A path traversal vulnerability...

CVE-2024-8978

The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.0.9 via the 'initcontentregisteruseremailcontrols' function. This makes it possib...

PT-2024-39950 · WordPress · Pdf Generator Addon For Elementor Page Builder

Name of the Vulnerable Software and Affected Versions: PDF Generator Addon for Elementor Page Builder plugin for WordPress versions up to, and including, 1.7.5 Description: The PDF Generator Addon for Elementor Page Builder plugin for WordPress is vulnerable to Path Traversal. This makes it...

WordPress Essential Addons for Elementor plugin <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zer0gh0st in WordPress Plugin Essential Addons for Elementor versions = 6.0.7...