Lucene search
+L

2140 matches found

Cvelist
Cvelist
•added 2024/11/02 2:03 a.m.•32 views

CVE-2024-9868 Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Age Gate Widget 'url' parameter in all versions up to, and including, 5.10.1 due to insufficient input sanitization a...

5.4CVSS0.00263EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/11/02 12:00 a.m.•16 views

WordPress plugin Element Pack Elementor Addons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.4CVSS5.9AI score0.00263EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/11/02 12:00 a.m.•15 views

WordPress plugin Element Pack Elementor Addons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.4CVSS6AI score0.00248EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/02 12:00 a.m.•5 views

CVE-2024-10310: Improper Neutralization of Input During Web Page Generation

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom Gallery Widget 'imagetitle' parameter in all versions up to, and including, 5.10.1 due to insufficient input...

6.4CVSS6AI score0.00248EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/02 12:00 a.m.•6 views

CVE-2024-9868: Improper Neutralization of Input During Web Page Generation

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Age Gate Widget 'url' parameter in all versions up to, and including, 5.10.1 due to insufficient input sanitization a...

5.4CVSS6AI score0.00263EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/01 3:15 p.m.•10 views

CVE-2024-37255

Missing Authorization vulnerability in Wpmet Elements kit Elementor addons allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Elements kit Elementor addons: from n/a through 3.1.4...

5.3CVSS5.8AI score0.00359EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/01 3:15 p.m.•23 views

CVE-2024-37255

Missing Authorization vulnerability in Roxnor ElementsKit Elementor addons Lite elementskit-lite.This issue affects ElementsKit Elementor addons Lite: from n/a through = 3.1.4...

5.3CVSS0.00359EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/01 2:18 p.m.•160 views

CVE-2024-37255

CVE-2024-37255 corresponds to a Missing Authorization vulnerability in Wpmet Elements Kit Elementor addons (ElementsKit Lite)

5.3CVSS5.9AI score0.00359EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/11/01 12:00 a.m.•17 views

WordPress plugin Elements kit Elementor addons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.6AI score0.00359EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/01 12:00 a.m.•20 views

PT-2024-16177 · Elementor · Element Pack Elementor Addons

Name of the Vulnerable Software and Affected Versions: Element Pack Elementor Addons versions up to, and including, 5.10.1 Description: The vulnerability is a Stored Cross-Site Scripting issue due to insufficient input sanitization and output escaping in the Custom Gallery Widget image title...

6.4CVSS6.2AI score0.00248EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/01 12:00 a.m.•6 views

CVE-2024-37255: Missing Authorization

Missing Authorization vulnerability in Roxnor ElementsKit Elementor addons Lite elementskit-lite.This issue affects ElementsKit Elementor addons Lite: from n/a through = 3.1.4...

5.3CVSS5.8AI score0.00359EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/28 8:15 p.m.•18 views

CVE-2024-50453

Relative Path Traversal vulnerability in Webangon The Pack Elementor addons allows PHP Local File Inclusion.This issue affects The Pack Elementor addons: from n/a through 2.0.9...

8.8CVSS5.8AI score0.00557EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/28 7:52 p.m.•77 views

CVE-2024-50453

CVE-2024-50453 is a Relative Path Traversal vulnerability in the WordPress plugin family The Pack Elementor addons. Affected versions are listed as from n/a through 2.0.9. The underlying issue enables PHP Local File Inclusion, which could allow an attacker to access restricted files on the server...

8.8CVSS5.9AI score0.00557EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/10/28 7:52 p.m.•43 views

CVE-2024-50453 WordPress The Pack Elementor addons plugin <= 2.0.9 - Local File Inclusion vulnerability

Relative Path Traversal vulnerability in webangon The Pack Elementor addons the-pack-addon allows PHP Local File Inclusion.This issue affects The Pack Elementor addons: from n/a through = 2.0.9...

7.5CVSS0.00557EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/28 7:52 p.m.•24 views

CVE-2024-50453 WordPress The Pack Elementor addons plugin <= 2.0.9 - Local File Inclusion vulnerability

Relative Path Traversal vulnerability in webangon The Pack Elementor addons the-pack-addon allows PHP Local File Inclusion.This issue affects The Pack Elementor addons: from n/a through = 2.0.9...

7.5CVSS5.9AI score0.00557EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/28 12:15 p.m.•13 views

CVE-2024-50442

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through 1.3.980...

7.2CVSS5.8AI score0.00549EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/28 12:15 p.m.•29 views

CVE-2024-50442

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through = 1.3.980...

7.2CVSS0.00549EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/28 11:14 a.m.•25 views

CVE-2024-50442 WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through = 1.3.980...

6.5CVSS5.9AI score0.00549EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/28 11:14 a.m.•45 views

CVE-2024-50442 WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through = 1.3.980...

6.5CVSS0.00549EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/28 11:14 a.m.•81 views

CVE-2024-50442

CVE-2024-50442 is an XML External Entity (XXE) vulnerability in WordPress plugin Royal Elementor Addons and Templates (

7.2CVSS5.9AI score0.00549EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder