2364 matches found
WordPress Exclusive Team for Elementor Plugin <= 1.2.4 is vulnerable to Cross Site Request Forgery (CSRF)
Software Exclusive Team for Elementor Type Plugin Vulnerable versions = 1.2.4 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47150 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 8cf4101432fb Credits István...
WordPress Master Addons for Elementor Plugin <= 2.0.5.3 is vulnerable to Broken Access Control
Software Master Addons for Elementor Type Plugin Vulnerable versions = 2.0.5.3 Fixed in 2.0.5.4.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-40679 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 6468506a04c1 Credits...
WordPress Themesflat Addons For Elementor Plugin <= 2.0.0 is vulnerable to PHP Object Injection
Software Themesflat Addons For Elementor Type Plugin Vulnerable versions = 2.0.0 Fixed in 2.0.1 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2023-37390 Patch priority High CVSS severity High 8.3 Developer Claim ownership PSID 27be6a2ff8c6 Credits Robert R Required...
PT-2023-26814 · Crocoblock · Crocoblock Jetelements For Elementor
Name of the Vulnerable Software and Affected Versions: Crocoblock JetElements For Elementor versions 2.6.10 and earlier Description: The issue is related to an Improper Control of Generation of Code 'Code Injection' vulnerability. This allows for code injection, which can be exploited by attacker...
CVE-2023-3779
The Essential Addons For Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 5.8.1 due to the plugin adding the API key to the source code of any page running the MailChimp block. This makes it possible for unauthenticated attackers...
CVE-2023-3779 Essential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure
The Essential Addons For Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 5.8.1 due to the plugin adding the API key to the source code of any page running the MailChimp block. This makes it possible for unauthenticated attackers...
WordPress Product Filter Widget for Elementor Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)
Software Product Filter Widget for Elementor Type Plugin Vulnerable versions = 1.0.1 Fixed in 1.0.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 52fb5db9bd4c Credits Rafie Muhammad...
CVE-2022-47169
Cross-Site Request Forgery CSRF vulnerability in StaxWP Visibility Logic for Elementor plugin = 2.3.4 versions...
CVE-2022-47169
Cross-Site Request Forgery CSRF vulnerability in StaxWP Visibility Logic for Elementor plugin = 2.3.4 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in StaxWP Visibility Logic for Elementor plugin = 2.3.4 versions...
CVE-2022-47169 WordPress Visibility Logic for Elementor Plugin <= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in StaxWP Visibility Logic for Elementor plugin = 2.3.4 versions...
WordPress Contact Widgets For Elementor Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)
Software Contact Widgets For Elementor Type Plugin Vulnerable versions = 1.0.8 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5b33610fc779 Credits Rafie Muhammad...
WordPress RT Easy Builder – Advanced addons for Elementor Plugin <= 1.8 is vulnerable to Cross Site Scripting (XSS)
Software RT Easy Builder – Advanced addons for Elementor Type Plugin Vulnerable versions = 1.8 Fixed in 1.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8240f5fa6f97 Credits Rafi...
WordPress Power Ups for Elementor Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)
Software Power Ups for Elementor Type Plugin Vulnerable versions = 1.2.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5f90ede97ce0 Credits Rafie Muhammad Patchstack...
WordPress Ultimate Post Kit – Addons For Elementor Plugin <= 3.6.3 is vulnerable to Cross Site Scripting (XSS)
Software Ultimate Post Kit – Addons For Elementor Type Plugin Vulnerable versions = 3.6.3 Fixed in 3.6.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 162050be8a2d Credits Rafie...
WordPress Primary Addon for Elementor Plugin < 1.5.3 is vulnerable to Cross Site Scripting (XSS)
Software Primary Addon for Elementor Type Plugin Vulnerable versions 1.5.3 Fixed in 1.5.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 636a21480ff8 Credits Rafie Muhammad...
CVE-2023-2517 Metform Elementor Contact Form Builder <= 3.3.2 - Cross-Site Request Forgery via permalink_setup
The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3.2. This is due to missing or incorrect nonce validation on the permalinksetup function. This makes it possible for unauthenticated attackers to change...
WordPress Happy Addons for Elementor Plugin < 3.8.3 CSRF Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wedevs:happyaddonsforelementor"; if description...