CVE-2024-13649

creationtimestamp| type| source ---|---|--- 2025-03-08 11:36:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6944 2025-03-08 15:11:19+00:00| seen| https://t.me/cvedetector/19902 2025-03-08 16:29:02+00:00| seen| Telegram/jkP3wyoW6YYMaly-esCs2Cm1Z9O2JhX6e7Bm9qOND7YfQaU...

CVE-2024-13649

CVE-2024-13649 concerns the WordPress plugin “140+ Widgets | Xpro Addons For Elementor – FREE”. The vulnerability is a stored Cross-Site Scripting (XSS) condition in several widgets, caused by insufficient input sanitization and output escaping. Affected product: Xpro Elementor Addons for Element...