CVE-2024-12062: Authorization Bypass Through User-Controlled Key

The Charity Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.3.3 via the 'nacharityelementortemplate' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers...

PT-2024-17424

Name of the Vulnerable Software and Affected Versions Charity Addon for Elementor plugin for WordPress versions up to, and including, 1.3.2 Description The issue concerns insufficient restrictions on which posts can be included through the nacharity elementor template shortcode, allowing...

PT-2024-35071

Name of the Vulnerable Software and Affected Versions NicheAddons Charity Addon for Elementor versions 1.3.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This means that an...

CVE-2024-51938: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicheaddons Charity Addon for Elementor charity-addon-for-elementor allows DOM-Based XSS.This issue affects Charity Addon for Elementor: from n/a through = 1.3.2...

CVE-2024-44026: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicheaddons Charity Addon for Elementor charity-addon-for-elementor allows Stored XSS.This issue affects Charity Addon for Elementor: from n/a through = 1.3.0...