Lucene search
+L

642 matches found

OSV
OSV
•added 2024/11/01 3:15 p.m.•16 views

CVE-2024-47361

Missing Authorization vulnerability in WPVibes Elementor Addon Elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Addon Elements: from n/a through 1.13.6...

8.8CVSS5.8AI score0.00442EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/01 3:15 p.m.•65 views

CVE-2024-47361

Missing Authorization vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder.This issue affects Elementor Addon Elements: from n/a through = 1.13.6...

8.8CVSS0.00442EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/01 2:17 p.m.•39 views

CVE-2024-47361 WordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder.This issue affects Elementor Addon Elements: from n/a through = 1.13.6...

6.5CVSS0.00442EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/01 2:17 p.m.•88 views

CVE-2024-47361

CVE-2024-47361 – Elementor Addon Elements (WPVibes)

8.8CVSS5.9AI score0.00442EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/01 2:17 p.m.•18 views

CVE-2024-47361 WordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPVibes Elementor Addon Elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Addon Elements: from n/a through 1.13.6...

6.5CVSS6.9AI score0.00442EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/01 12:00 a.m.•20 views

WordPress plugin Elementor Addon Elements 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

8.8CVSS6.6AI score0.00442EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/01 12:00 a.m.•4 views

CVE-2024-47361: Missing Authorization

Missing Authorization vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder.This issue affects Elementor Addon Elements: from n/a through = 1.13.6...

8.8CVSS5.8AI score0.00442EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/10/29 5:12 a.m.•17 views

WordPress Premium Addons for Elementor plugin <= 4.10.60 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Box Widget vulnerability

Authenticated Contributor+ DOM-Based Stored Cross-Site Scripting via Video Box Widget vulnerability discovered by zer0gh0st in WordPress Plugin Premium Addons for Elementor versions = 4.10.60...

6.4CVSS5.8AI score0.00296EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/10/19 7:15 a.m.•17 views

CVE-2024-9889

The ElementInvader Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.9 via the Page Loader widget. This makes it possible for authenticated attackers, with contributor-level access and above, to view...

4.3CVSS5.8AI score0.00344EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/10/17 12:00 a.m.•14 views

PT-2024-33397 · Elementor · Nicheaddons Primary Addon For Elementor

Name of the Vulnerable Software and Affected Versions: NicheAddons Primary Addon for Elementor versions 1.5.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, enabling...

6.5CVSS6.3AI score0.00276EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/10/16 12:00 a.m.•14 views

WordPress plugin Essential Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS7AI score0.00461EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/10/14 12:40 a.m.•22 views

WordPress Elementor Addon Elements plugin <= 1.13.8 - Authenticated (Contributor+) Sensitive Information Exposure via table_saved_sections vulnerability

Authenticated Contributor+ Sensitive Information Exposure via tablesavedsections vulnerability discovered by Ankit Patel in WordPress Plugin Elementor Addon Elements versions = 1.13.8...

4.3CVSS7AI score0.00378EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/10/14 12:00 a.m.•26 views

WordPress Elementor Addon Elements Plugin <= 1.13.8 is vulnerable to Sensitive Data Exposure

Software Elementor Addon Elements Type Plugin Vulnerable versions = 1.13.8 Fixed in 1.13.9 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-8902 Patch priority Low CVSS severity Low 4.3 Developer WPVibes PSID ba1eb37881f7 Credits Ankit Patel Required...

4.3CVSS6.6AI score0.00378EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2024/10/12 10:15 a.m.•29 views

CVE-2024-8902

The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.8 via the rendercolumn function in modules/data-table/widgets/data-table.php. This makes it possible for authenticated attackers, with Contributor-level...

4.3CVSS0.00378EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/10/12 9:39 a.m.•23 views

CVE-2024-8902 Elementor Addon Elements <= 1.13.8 - Authenticated (Contributor+) Sensitive Information Exposure via table_saved_sections

The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.8 via the rendercolumn function in modules/data-table/widgets/data-table.php. This makes it possible for authenticated attackers, with Contributor-level...

4.3CVSS6.5AI score0.00378EPSS
SaveExploits0References2
CVE
CVE
•added 2024/10/12 9:39 a.m.•86 views

CVE-2024-8902

CVE-2024-8902 affects the WordPress plugin Elementor Addon Elements (WPVibes). The vulnerability is an authenticated information disclosure via the function render_column in modules/data-table/widgets/data-table.php, allowing attackers with Contributor-level access and above to extract sensitive ...

4.3CVSS4.7AI score0.00378EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2024/10/12 12:00 a.m.•19 views

WordPress plugin Elementor Addon Elements 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

4.3CVSS5.9AI score0.00378EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/12 12:00 a.m.•2 views

CVE-2024-8902: Exposure of Sensitive Information to an Unauthorized Actor

The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.8 via the rendercolumn function in modules/data-table/widgets/data-table.php. This makes it possible for authenticated attackers, with Contributor-level...

4.3CVSS5.7AI score0.00378EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/12 12:00 a.m.•20 views

PT-2024-39309 · WordPress · Elementor Addon Elements

Name of the Vulnerable Software and Affected Versions: Elementor Addon Elements plugin for WordPress versions up to, and including, 1.13.8 Description: The issue allows authenticated attackers with Contributor-level access and above to extract sensitive private, pending, and draft template data v...

4.3CVSS6.5AI score0.00378EPSS
SaveExploits0References7
OSV
OSV
•added 2024/10/06 1:15 p.m.•14 views

CVE-2024-44032

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in NicheAddons Restaurant & Cafe Addon for Elementor allows Stored XSS.This issue affects Restaurant & Cafe Addon for Elementor: from n/a through 1.5.5...

5.4CVSS5.8AI score0.00313EPSS
SaveExploits0References1
Rows per page
Query Builder