Lucene search
K

7272 matches found

GithubExploit
GithubExploit
added 2025/12/27 1:27 p.m.241 views

Exploit for Unrestricted Upload of File with Dangerous Type in Royal-Elementor-Addons Royal_Elementor_Addons

Royal Elementor Addons ≤ 1.3.78 – Unauthenticated Arbitrary Fi...

9.8CVSS7.4AI score0.81695EPSS
Exploits18
RedhatCVE
RedhatCVE
added 2025/12/25 1:23 p.m.1 views

CVE-2025-68532

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in modeltheme ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery allows Stored XSS.This issue affects ModelTheme Addons for WPBakery and Elementor: from n/a through 1.5.6...

6.5CVSS6AI score0.00139EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/25 1:23 p.m.3 views

CVE-2025-68494

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Premium Addons for Elementor: from n/a through = 4.11.53...

5.3CVSS6.9AI score0.00305EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/24 3:30 p.m.3 views

EUVD-2025-205191

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in modeltheme ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery allows Stored XSS.This issue affects ModelTheme Addons for WPBakery and Elementor: from n/a through 1.5.6...

5.4CVSS5.5AI score0.00139EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/24 3:30 p.m.2 views

EUVD-2025-205209

Server-Side Request Forgery SSRF vulnerability in bdthemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Server Side Request Forgery.This issue affects Prime Slider – Addons For Elementor: from n/a through = 4.0.10...

9.1CVSS6.5AI score0.00154EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/24 3:30 p.m.3 views

EUVD-2025-205212

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Premium Addons for Elementor: from n/a through = 4.11.53...

7.5CVSS6.3AI score0.00305EPSS
Exploits0References2
NVD
NVD
added 2025/12/24 1:16 p.m.2 views

CVE-2025-68532

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in modeltheme ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery allows Stored XSS.This issue affects ModelTheme Addons for WPBakery and Elementor: from n/a through 1.5.6...

6.5CVSS0.00139EPSS
Exploits0References1
NVD
NVD
added 2025/12/24 1:16 p.m.1 views

CVE-2025-68500

Server-Side Request Forgery SSRF vulnerability in bdthemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Server Side Request Forgery.This issue affects Prime Slider – Addons For Elementor: from n/a through = 4.0.10...

4.9CVSS0.00154EPSS
Exploits0References1
OSV
OSV
added 2025/12/24 1:16 p.m.1 views

CVE-2025-68494

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Premium Addons for Elementor: from n/a through = 4.11.53...

7.5CVSS5.8AI score0.00305EPSS
Exploits0References1
NVD
NVD
added 2025/12/24 1:16 p.m.4 views

CVE-2025-68494

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Premium Addons for Elementor: from n/a through = 4.11.53...

5.3CVSS0.00305EPSS
Exploits0References1
NVD
NVD
added 2025/12/24 1:16 p.m.2 views

CVE-2023-40679

Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Master Addons for Elementor: from n/a through 2.0.5.3...

6.5CVSS0.00247EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/24 12:51 p.m.26 views

CVE-2023-40679 WordPress Master Elementor Addons plugin <= 2.0.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Master Addons for Elementor: from n/a through 2.0.5.3...

6.5CVSS0.00247EPSS
Exploits0References1
CVE
CVE
added 2025/12/24 12:51 p.m.15 views

CVE-2023-40679

CVE-2023-40679 is a broken access control vulnerability in the WordPress plugin Master Addons for Elementor (aka Jewel Theme Master Addons for Elementor). Affected versions are up to and including 2.0.5.3, with unauthenticated access possible due to misconfigured access controls. The issue is con...

6.5CVSS7.4AI score0.00247EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/24 12:51 p.m.1 views

CVE-2023-40679 WordPress Master Elementor Addons plugin <= 2.0.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Master Addons for Elementor: from n/a through 2.0.5.3...

6.5CVSS6.6AI score0.00247EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/24 12:51 p.m.1 views

EUVD-2023-45235

Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Master Addons for Elementor: from n/a through 2.0.5.3...

6.5CVSS6.5AI score0.00247EPSS
Exploits0References2
CVE
CVE
added 2025/12/24 12:31 p.m.12 views

CVE-2025-68532

CVE-2025-68532 relates to a Stored Cross-Site Scripting vulnerability in ModelTheme Addons for WPBakery and Elementor (modeltheme-addons-for-wpbakery). The issue arises from improper input neutralization during web page generation, allowing stored script execution via the affected plugin. Affecte...

6.5CVSS5.6AI score0.00139EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/24 12:31 p.m.28 views

CVE-2025-68532 WordPress ModelTheme Addons for WPBakery and Elementor plugin < 1.5.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in modeltheme ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery allows Stored XSS.This issue affects ModelTheme Addons for WPBakery and Elementor: from n/a through 1.5.6...

6.5CVSS0.00139EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/24 12:31 p.m.2 views

CVE-2025-68532 WordPress ModelTheme Addons for WPBakery and Elementor plugin < 1.5.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in modeltheme ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery allows Stored XSS.This issue affects ModelTheme Addons for WPBakery and Elementor: from n/a through 1.5.6...

6.5CVSS5.6AI score0.00139EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/24 12:31 p.m.26 views

CVE-2025-68500 WordPress Prime Slider – Addons For Elementor plugin <= 4.0.10 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in bdthemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Server Side Request Forgery.This issue affects Prime Slider – Addons For Elementor: from n/a through = 4.0.10...

4.9CVSS0.00154EPSS
Exploits0References1
CVE
CVE
added 2025/12/24 12:31 p.m.11 views

CVE-2025-68500

The CVE-2025-68500 entry describes a Server-Side Request Forgery (SSRF) in the WordPress plugin Prime Slider – Addons For Elementor (bdthemes-prime-slider-lite). Affected component: bdthemes Prime Slider – Addons For Elementor, via the lite variant; vulnerable version range: up to and including 4...

4.9CVSS6.6AI score0.00154EPSS
Exploits0References1
Rows per page
Query Builder