7468 matches found
PT-2023-6274 · WordPress · The Royal Elementor Addons/Templates
Name of the Vulnerable Software and Affected Versions: Royal Elementor Addons and Templates versions prior to 1.3.79 Description: The issue is related to unlimited file upload of dangerous types. Exploitation of this issue may allow a remote attacker to execute arbitrary code by uploading a...
PT-2023-9164 · Unknown +1 · Prestashop +1
Name of the Vulnerable Software and Affected Versions: PrestaShop Buy Addons baproductzoommagnifier module versions 1.0.16 and before Description: The issue is related to a lack of protection against SQL structure attacks in the BaproductzoommagnifierZoomModuleFrontController::run method of the...
CVE-2023-41236
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Happy addons Happy Elementor Addons Pro plugin = 2.8.0 versions...
CVE-2023-41236
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Happy addons Happy Elementor Addons Pro plugin = 2.8.0 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Happy addons Happy Elementor Addons Pro plugin = 2.8.0 versions...
CVE-2023-30493
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Themefic Ultimate Addons for Contact Form 7 plugin = 3.2.0 versions...
CVE-2023-30493
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Themefic Ultimate Addons for Contact Form 7 plugin = 3.2.0 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Themefic Ultimate Addons for Contact Form 7 plugin = 3.2.0 versions...
CVE-2023-41236 WordPress Happy Elementor Addons Pro Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Happy addons Happy Elementor Addons Pro plugin = 2.8.0 versions...
CVE-2023-41236 WordPress Happy Elementor Addons Pro Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Happy addons Happy Elementor Addons Pro plugin = 2.8.0 versions...
CVE-2023-41236
CVE-2023-41236 affects Happy Elementor Addons Pro (WordPress) up to version 2.8.0, exposing unauthenticated reflected XSS. Patchstack assigns CVSS v3.1 vectors and basescore 7.1 (HIGH) with network access and user interaction required. Affected product: Happy Elementor Addons Pro; vulnerability t...
CVE-2023-30493
CVE-2023-30493 is an Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability affecting Themefic Ultimate Addons for Contact Form 7, version
WordPress plugin Ultimate Addons for Contact Form Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
PT-2023-27859 · WordPress · Happy Addons For Elementor Pro
Name of the Vulnerable Software and Affected Versions: Happy Elementor Addons Pro plugin versions = 2.8.0 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to...
WordPress Essential Addons for Elementor Plugin <= 5.8.8 is vulnerable to Privilege Escalation
Software Essential Addons for Elementor Type Plugin Vulnerable versions = 5.8.8 Fixed in 5.8.9 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-41955 Patch priority High CVSS severity High 8.8 Developer WPDeveloper PSID 80be75758179...
PT-2023-28189 · WordPress · Essential Addons For Elementor
Name of the Vulnerable Software and Affected Versions: Essential Addons for Elementor versions through 5.8.8 Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in the Essential Addons for Elementor plugin. It is estimated that over 1 million active...
CVE-2023-32241
Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPDeveloper Essential Addons for Elementor Pro plugin = 5.4.8 versions...
CVE-2023-32241
Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPDeveloper Essential Addons for Elementor Pro plugin = 5.4.8 versions...