Lucene search
+L

9677 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/12/09 2:30 a.m.•7 views

Malicious code in manoj-task-addons (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2024/12/09 2:30 a.m.•15 views

MAL-2024-11382 Malicious code in manoj-task-addons (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•21 views

WordPress plugin Tutor LMS Elementor Addons has security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS8.3AI score0.00493EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•11 views

CVE-2023-47830: Missing Authorization

Missing Authorization vulnerability in Addons for Contact Form 7 Live Preview for Contact Form 7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Preview for Contact Form 7: from n/a through 1.2.0...

5.4CVSS8.7AI score0.00387EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•27 views

WordPress plugin ABCBiz Addons and Templates for Elementor: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS8.1AI score0.00345EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•20 views

WordPress plugin Xpro Elementor Addons has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS8AI score0.00351EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•12 views

CVE-2024-54230: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Masud Hasan Unlock Addons for Elementor unlock-addons-for-elementor allows DOM-Based XSS.This issue affects Unlock Addons for Elementor: from n/a through = 2.2.4...

6.5CVSS8.6AI score0.00312EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•13 views

CVE-2024-54247: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ABCBiz ABCBiz Addons and Templates for Elementor allows Stored XSS.This issue affects ABCBiz Addons and Templates for Elementor: from n/a through 2.0.2...

6.5CVSS8.6AI score0.00345EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•13 views

CVE-2024-54253: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons.This issue affects Xpro Elementor Addons: from n/a through = 1.4.6.5...

6.5CVSS8.5AI score0.00351EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•9 views

CVE-2024-54260: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in blazethemes News Kit Elementor Addons news-kit-elementor-addons allows Stored XSS.This issue affects News Kit Elementor Addons: from n/a through = 1.4.2...

6.5CVSS8.6AI score0.00312EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•11 views

CVE-2024-54224: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in quomodosoft ElementsReady Addons for Elementor element-ready-lite allows DOM-Based XSS.This issue affects ElementsReady Addons for Elementor: from n/a through = 6.4.7...

6.5CVSS8.5AI score0.00325EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•15 views

WordPress plugin ElementsReady Addons for Elementor: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS8.1AI score0.00325EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•33 views

PT-2024-36126 · Unknown · Abcbiz Addons/Templates For Elementor

Name of the Vulnerable Software and Affected Versions: ABCBiz Addons and Templates for Elementor versions 2.0.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Stored Cross-site Scripting XSS vulnerability. This...

6.5CVSS8.3AI score0.00345EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•18 views

PT-2024-36102 · Unknown · Elementsready Addons For Elementor

Name of the Vulnerable Software and Affected Versions: ElementsReady Addons for Elementor versions through 6.4.7 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This means that an...

6.5CVSS8.4AI score0.00325EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•10 views

CVE-2024-53816: Missing Authorization

Missing Authorization vulnerability in Themeum Tutor LMS Elementor Addons tutor-lms-elementor-addons.This issue affects Tutor LMS Elementor Addons: from n/a through = 2.1.5...

8.8CVSS8.5AI score0.00493EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•21 views

WordPress plugin Unlock Addons for Elementor: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS8.1AI score0.00312EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•26 views

PT-2024-35931 · Themeum · Tutor Lms Elementor Addons

Name of the Vulnerable Software and Affected Versions: Tutor LMS Elementor Addons versions 2.1.5 and earlier Description: The issue is related to a Missing Authorization vulnerability in Themeum Tutor LMS Elementor Addons. Recommendations: For Tutor LMS Elementor Addons versions 2.1.5 and earlier...

8.8CVSS8.4AI score0.00493EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•22 views

PT-2024-36141 · Unknown · Blazethemes News Kit Elementor Addons

Name of the Vulnerable Software and Affected Versions: BlazeThemes News Kit Elementor Addons versions 1.2.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker c...

6.5CVSS6.2AI score0.00312EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2024/12/06 9:32 p.m.•15 views

WordPress PowerPack Elementor Addons (Free Widgets, Extensions and Templates) plugin <= 2.8.1 - Authenticated (Contributor+) Post Disclosure vulnerability

Authenticated Contributor+ Post Disclosure vulnerability discovered by Francesco Carlucci in WordPress Plugin PowerPack Addons for Elementor versions = 2.8.1...

4.3CVSS7AI score0.00302EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2024/12/06 2:15 p.m.•20 views

CVE-2024-54212

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noor alam Magical Addons For Elementor allows Stored XSS.This issue affects Magical Addons For Elementor: from n/a through 1.2.6...

5.4CVSS8.4AI score0.00261EPSS
SaveExploits0References1
Rows per page
Query Builder