Lucene search
+L

7488 matches found

Patchstack
Patchstack
added 2025/01/24 11:47 a.m.7 views

WordPress All Embed – Elementor Addons plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Khalid Yusuf in WordPress Plugin All Embed – Elementor Addons versions = 1.1.3...

6.5CVSS6.1AI score0.0036EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2025/01/24 11:15 a.m.8 views

CVE-2024-13354

The Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTML tags in several widgets in all versions up to, and including, 1.6.4 due to insufficient input sanitization and output escaping. Thi...

5.4CVSS7.4AI score0.00219EPSS
SaveExploits0References2
NVD
NVD
added 2025/01/24 11:15 a.m.30 views

CVE-2024-13354

The Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTML tags in several widgets in all versions up to, and including, 1.6.4 due to insufficient input sanitization and output escaping. Thi...

6.4CVSS0.00219EPSS
SaveExploits0References2
NVD
NVD
added 2025/01/24 11:15 a.m.21 views

CVE-2024-13335

The Spexo Addons for Elementor – Free Elementor Addons, Widgets and Templates plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the tmpcoderthemeinstallfunc function in all versions up to, and including, 1.0.14. This makes it possible for authenticated...

4.3CVSS0.00241EPSS
SaveExploits0References2
OSV
OSV
added 2025/01/24 11:15 a.m.6 views

CVE-2024-13335

The Spexo Addons for Elementor – Free Elementor Addons, Widgets and Templates plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the tmpcoderthemeinstallfunc function in all versions up to, and including, 1.0.14. This makes it possible for authenticated...

4.3CVSS7.3AI score0.00241EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/01/24 11:7 a.m.7 views

CVE-2024-13354 Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTML tags in several widgets in all versions up to, and including, 1.6.4 due to insufficient input sanitization and output escaping. Thi...

6.4CVSS6.2AI score0.00219EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/01/24 11:7 a.m.10 views

CVE-2024-13335 Sastra Essential Addons for Elementor – Free Elementor Addons, Widgets and Templates <= 1.0.14 - Missing Authorization to Spexo Theme Install

The Spexo Addons for Elementor – Free Elementor Addons, Widgets and Templates plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the tmpcoderthemeinstallfunc function in all versions up to, and including, 1.0.14. This makes it possible for authenticated...

4.3CVSS5.3AI score0.00241EPSS
SaveExploits0References2
CVE
CVE
added 2025/01/24 11:7 a.m.46 views

CVE-2024-13354

CVE-2024-13354 affects the WordPress plugin family “Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates.” The vulnerability is a Stored Cross-Site Scripting (XSS) flaw in multiple widgets caused by insufficient input sanitization and output escaping. It is explo...

6.4CVSS5.8AI score0.00219EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/01/24 11:7 a.m.37 views

CVE-2024-13335 Sastra Essential Addons for Elementor – Free Elementor Addons, Widgets and Templates <= 1.0.14 - Missing Authorization to Spexo Theme Install

The Spexo Addons for Elementor – Free Elementor Addons, Widgets and Templates plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the tmpcoderthemeinstallfunc function in all versions up to, and including, 1.0.14. This makes it possible for authenticated...

4.3CVSS0.00241EPSS
SaveExploits0References2
CVE
CVE
added 2025/01/24 11:7 a.m.80 views

CVE-2024-13335

CVE-2024-13335 affects Spexo Addons for Elementor (WordPress plugin) and is due to a missing capability check in the tmpcoder_theme_install_func() function. The vulnerability exists in all versions up to and including 1.0.14, enabling authenticated attackers with Subscriber-level access and above...

4.3CVSS6.6AI score0.00241EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/24 12:0 a.m.6 views

PT-2025-2129 · WordPress · Responsive Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates plugin for WordPress versions up to, and including, 1.6.4 Description: The issue is related to Stored Cross-Site Scripting via HTML tags in several widgets...

6.4CVSS6.1AI score0.00219EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/01/24 12:0 a.m.16 views

PT-2025-5449 · Unknown · Elementinvader Addons For Elementor

Name of the Vulnerable Software and Affected Versions: ElementInvader Addons for Elementor versions 1.3.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations: For...

8.8CVSS6.9AI score0.00489EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/01/24 12:0 a.m.4 views

WordPress plugin Responsive Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.4CVSS7.9AI score0.00219EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/24 12:0 a.m.10 views

PT-2025-5418 · Elementor · Elementinvader Addons For Elementor

Name of the Vulnerable Software and Affected Versions: ElementInvader Addons for Elementor versions 1.3.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This enables potentia...

6.5CVSS6.9AI score0.00367EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/01/24 12:0 a.m.8 views

WordPress plugin ElementInvader Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS8.4AI score0.00489EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/24 12:0 a.m.10 views

PT-2025-5431 · Bplugins · Bplugins All Embed – Elementor Addons

Name of the Vulnerable Software and Affected Versions: bPlugins All Embed – Elementor Addons versions 1.1.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means an attacker can...

6.5CVSS6.3AI score0.0036EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/01/24 12:0 a.m.13 views

WordPress plugin ElementInvader Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS8AI score0.00309EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/24 12:0 a.m.8 views

WordPress plugin Spexo Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.5AI score0.00241EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/24 12:0 a.m.10 views

PT-2025-5543

Name of the Vulnerable Software and Affected Versions ElementInvader Addons for Elementor versions 1.3.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

6.5CVSS5.6AI score0.00309EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/01/24 12:0 a.m.9 views

WordPress plugin ElementInvader Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS8AI score0.00367EPSS
SaveExploits0References2
Rows per page
Query Builder