Lucene search
+L

7488 matches found

Patchstack
Patchstack
added 2024/12/19 12:20 p.m.11 views

WordPress Premium Addons for Elementor plugin <= 4.10.56 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Premium Addons for Elementor versions = 4.10.56...

8.8CVSS7AI score0.00306EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/19 12:13 p.m.7 views

WordPress WPMozo Addons Lite for Elementor plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin WPMozo Addons Lite for Elementor versions = 1.2.0...

6.5CVSS6.1AI score0.00231EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/19 4:1 a.m.8 views

WordPress Ultimate Store Kit Elementor Addons plugin <= 2.3.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Ultimate Store Kit Elementor Addons versions = 2.3.0...

4.3CVSS7AI score0.00233EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/18 2:4 p.m.6 views

WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Essential Addons for Elementor versions = 6.0.7...

6.5CVSS6.1AI score0.00248EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/18 2:3 p.m.7 views

WordPress Royal Elementor Addons and Templates plugin <= 1.3.987 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Robert DeVore Patchstack Alliance in WordPress Plugin Royal Elementor Addons versions = 1.3.987...

6.5CVSS6.1AI score0.00248EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2024/12/18 10:15 a.m.16 views

CVE-2024-12340

The Animation Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.6 via the 'render' function in widgets/content-slider.php and widgets/tabs.php. This makes it possible for authenticated attackers, with...

4.3CVSS0.00335EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/12/18 9:22 a.m.26 views

CVE-2024-12340 Animation Addons for Elementor <= 1.1.6 - Authenticated (Contributor+) Sensitive Information Exposure via Content Slider and Tabs Widget Elementor Template

The Animation Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.6 via the 'render' function in widgets/content-slider.php and widgets/tabs.php. This makes it possible for authenticated attackers, with...

4.3CVSS0.00335EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/12/17 10:24 p.m.6 views

WordPress Animation Addons for Elementor plugin <= 1.1.6 - Authenticated (Contributor+) Sensitive Information Exposure via Content Slider and Tabs Widget Elementor Template vulnerability

Authenticated Contributor+ Sensitive Information Exposure via Content Slider and Tabs Widget Elementor Template vulnerability discovered by Ankit Patel in WordPress Plugin Animation Addons for Elementor versions = 1.1.6...

4.3CVSS7AI score0.00335EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/12/17 1:15 p.m.32 views

CVE-2024-10356

The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.4.8 in inc/Widgets/accordion/output/content.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

4.3CVSS0.00418EPSS
SaveExploits0References2
OSV
OSV
added 2024/12/17 1:15 p.m.10 views

CVE-2024-10356

The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.4.8 in inc/Widgets/accordion/output/content.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

4.3CVSS7.3AI score0.00418EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/12/17 12:43 p.m.26 views

CVE-2024-10356 ElementsReady Addons for Elementor <= 6.4.8 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates

The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.4.8 in inc/Widgets/accordion/output/content.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

4.3CVSS0.00418EPSS
SaveExploits0References2
CVE
CVE
added 2024/12/17 12:43 p.m.68 views

CVE-2024-10356

CVE-2024-10356 affects ElementsReady Addons for Elementor (WordPress). Remote code is not exposed; the issue is Sensitive Information Exposure due to insecure access control in inc/Widgets/accordion/output/content.php, exploitable by authenticated users with Contributor+ rights. The Red Hat/Wordf...

4.3CVSS4.4AI score0.00418EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/12/17 1:7 a.m.11 views

WordPress ElementsReady Addons for Elementor plugin <= 6.4.8 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates vulnerability

Authenticated Contributor+ Sensitive Information Exposure via Elementor Templates vulnerability discovered by Ankit Patel in WordPress Plugin ElementsReady Addons for Elementor versions = 6.4.8...

4.3CVSS7AI score0.00418EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/12/17 12:0 a.m.11 views

PT-2024-16215 · Unknown · Elementsready Addons For Elementor

Name of the Vulnerable Software and Affected Versions: ElementsReady Addons for Elementor versions up to, and including, 6.4.8 Description: The issue allows authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data due to...

4.3CVSS9.4AI score0.00418EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/12/17 12:0 a.m.10 views

WordPress plugin ElementsReady Addons for Elementor 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

4.3CVSS7.9AI score0.00418EPSS
SaveExploits0References2
NVD
NVD
added 2024/12/13 3:15 p.m.17 views

CVE-2023-38480

Missing Authorization vulnerability in Certain Dev Booster Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booster Elementor Addons: from n/a through 1.4.9...

5.3CVSS0.00512EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/13 2:23 p.m.45 views

CVE-2023-38480

CVE-2023-38480 affects Booster Elementor Addons (WordPress plugin) up to version 1.4.9. The root cause is missing authorization / broken access control enabling unauthenticated access. Public references indicate the vulnerability exists in Booster Elementor Addons

5.3CVSS8.5AI score0.00512EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/13 2:23 p.m.36 views

CVE-2023-38480 WordPress Booster Elementor Addons plugin <= 1.4.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in certaindev Booster Elementor Addons booster-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booster Elementor Addons: from n/a through = 1.4.9...

5.3CVSS6.9AI score0.00512EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/13 2:23 p.m.27 views

CVE-2023-38480 WordPress Booster Elementor Addons plugin <= 1.4.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Certain Dev Booster Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booster Elementor Addons: from n/a through 1.4.9...

5.3CVSS0.00512EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/13 12:0 a.m.7 views

WordPress plugin Booster Elementor Addons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS8.6AI score0.00512EPSS
SaveExploits0References1
Rows per page
Query Builder