7469 matches found
CVE-2023-51402
Cross-Site Request Forgery CSRF vulnerability in Brain Storm Force Ultimate Addons for WPBakery Page Builder.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a through 3.19.17...
CVE-2023-51402
Cross-Site Request Forgery CSRF vulnerability in Brain Storm Force Ultimate Addons for WPBakery Page Builder.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a through 3.19.17...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Brain Storm Force Ultimate Addons for WPBakery Page Builder.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a through 3.19.17...
CVE-2023-51402
CVE-2023-51402 is a CSRF vulnerability in Brain Storm Force Ultimate Addons for WPBakery Page Builder, affecting Ultimate Addons for WPBakery Page Builder up to version 3.19.17. Source mentions Cross-Site Request Forgery but does not provide exploitation details or a confirmed patch. No public re...
CVE-2023-50901
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes HT Mega – Absolute Addons For Elementor allows Reflected XSS.This issue affects HT Mega – Absolute Addons For Elementor: from n/a through 2.3.8...
CVE-2023-50901
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes HT Mega – Absolute Addons For Elementor allows Reflected XSS.This issue affects HT Mega – Absolute Addons For Elementor: from n/a through 2.3.8...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes HT Mega – Absolute Addons For Elementor allows Reflected XSS.This issue affects HT Mega – Absolute Addons For Elementor: from n/a through 2.3.8...
CVE-2023-50901
CVE-2023-50901 describes a reflected XSS in HasThemes HT Mega – Absolute Addons For Elementor, affecting HT Mega for Elementor versions up to 2.3.8. The root cause is improper neutralization of user input during web page generation. Impact is cross-site scripting on pages that incorporate the vul...
CVE-2023-47840
Improper Control of Generation of Code 'Code Injection' vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: from n/a through 1.5.2...
CVE-2023-47840 WordPress Qode Essential Addons Plugin <= 1.5.2 is vulnerable to Remote Code Execution (RCE)
Improper Control of Generation of Code 'Code Injection' vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: from n/a through 1.5.2...
CVE-2023-47840
CVE-2023-47840 affects Qode Essential Addons (
WordPress Plugin Qode Essential Addons Code Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in...
PT-2023-31709 · Hasthemes · Ht Mega – Absolute Addons For Elementor
Name of the Vulnerable Software and Affected Versions: HasThemes HT Mega – Absolute Addons For Elementor versions through 2.3.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This...
PT-2023-31879 · Leevio · Leevio Happy Addons For Elementor
Name of the Vulnerable Software and Affected Versions: Leevio Happy Addons for Elementor versions 3.9.1.1 and earlier Description: A Server-Side Request Forgery SSRF issue affects Leevio Happy Addons for Elementor. This issue allows an attacker to forge requests to servers, potentially leading to...
WordPress Plugin ULTIMATE ADDONS Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
WordPress Plugin Happy Addons for Elementor Code Issue Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Happy Addons for Elementor...
WordPress Happy Addons for Elementor Plugin <= 3.9.1.1 is vulnerable to Server Side Request Forgery (SSRF)
Software Happy Addons for Elementor Type Plugin Vulnerable versions = 3.9.1.1 Fixed in 3.10.0 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2023-51676 Patch priority Low CVSS severity Low 4.9 Developer Leevio PSID dee56bc2c646 Credits...
WordPress Ultimate Addons for Beaver Builder Plugin <= 1.35.14 is vulnerable to Privilege Escalation
Software Ultimate Addons for Beaver Builder Type Plugin Vulnerable versions = 1.35.14 Fixed in 1.35.15 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-51398 Patch priority Low CVSS severity Low 8.8 Developer Claim ownership PSID...
WordPress Ultimate Addons for Beaver Builder Plugin <= 1.35.13 is vulnerable to Arbitrary File Download
Software Ultimate Addons for Beaver Builder Type Plugin Vulnerable versions = 1.35.13 Fixed in 1.35.14 OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Download CVE CVE-2023-51401 Patch priority Low CVSS severity Low 6.3 Developer Claim ownership PSID 8fb95010e714 Credits Rafi...
WordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.17 is vulnerable to Cross Site Request Forgery (CSRF)
Software Ultimate Addons for WPBakery Page Builder Type Plugin Vulnerable versions = 3.19.17 Fixed in 3.19.18 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-51402 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c4cacdb211...