Lucene search
+L

12844 matches found

Cvelist
Cvelist
added 2024/12/21 8:24 a.m.23 views

CVE-2024-10797 Full Screen Menu for Elementor <= 1.0.7 - Authenticated (Contributor+) Post Disclosure

The Full Screen Menu for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.7 via the Full Screen Menu Elementor Widget due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers,...

4.3CVSS0.003EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/21 12:00 a.m.5 views

WordPress plugin Full Screen Menu for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8AI score0.003EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/12/21 12:00 a.m.8 views

WordPress plugin Elementor Website Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS7.6AI score0.00327EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/12/21 12:00 a.m.9 views

PT-2024-16293 · WordPress · Elementor Website Builder

Name of the Vulnerable Software and Affected Versions: Elementor Website Builder plugin for WordPress versions up to, and including, 3.25.9 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Typography Settings due to insufficient input sanitization and output...

6.4CVSS7.9AI score0.00327EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/12/21 12:00 a.m.6 views

PT-2024-16556 · WordPress · Full Screen Menu For Elementor

Name of the Vulnerable Software and Affected Versions: Full Screen Menu for Elementor plugin for WordPress versions up to, and including, 1.0.7 Description: The Full Screen Menu for Elementor plugin for WordPress has an Information Exposure issue due to insufficient restrictions on which posts ca...

4.3CVSS9.4AI score0.003EPSS
SaveExploits0References7
Patchstack
Patchstack
added 2024/12/20 9:02 p.m.7 views

WordPress Full Screen Menu for Elementor plugin <= 1.0.7 - Authenticated (Contributor+) Post Disclosure vulnerability

Authenticated Contributor+ Post Disclosure vulnerability discovered by Francesco Carlucci in WordPress Plugin Full Screen Menu for Elementor versions = 1.0.7...

4.3CVSS7AI score0.003EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/12/19 12:23 p.m.9 views

WordPress Royal Elementor Addons plugin <= 1.7.1001 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Royal Elementor Addons versions = 1.7.1001...

4.3CVSS7AI score0.00281EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/19 12:22 p.m.9 views

WordPress Royal Elementor Addons plugin <= 1.7.1001 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Royal Elementor Addons versions = 1.7.1001...

7.1CVSS6.1AI score0.00281EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/19 12:20 p.m.11 views

WordPress Premium Addons for Elementor plugin <= 4.10.56 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Premium Addons for Elementor versions = 4.10.56...

8.8CVSS7AI score0.00306EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/19 12:13 p.m.9 views

WordPress WPMozo Addons Lite for Elementor plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin WPMozo Addons Lite for Elementor versions = 1.2.0...

6.5CVSS6.1AI score0.00231EPSS
SaveExploits0Affected Software1
GithubExploit
GithubExploit
added 2024/12/19 8:57 a.m.569 views

Exploit for CVE-2024-9935

CVE-2024-9935 - PDF Generator Addon for Elementor Page Builder...

7.5CVSS9.4AI score0.0749EPSS
SaveExploits3
Patchstack
Patchstack
added 2024/12/19 4:01 a.m.9 views

WordPress Ultimate Store Kit Elementor Addons plugin <= 2.3.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Ultimate Store Kit Elementor Addons versions = 2.3.0...

4.3CVSS7AI score0.00237EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/18 2:04 p.m.8 views

WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Essential Addons for Elementor versions = 6.0.7...

6.5CVSS6.1AI score0.00248EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/18 2:03 p.m.8 views

WordPress Royal Elementor Addons and Templates plugin <= 1.3.987 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Robert DeVore Patchstack Alliance in WordPress Plugin Royal Elementor Addons versions = 1.3.987...

6.5CVSS6.1AI score0.00248EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2024/12/18 10:15 a.m.17 views

CVE-2024-12340

The Animation Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.6 via the 'render' function in widgets/content-slider.php and widgets/tabs.php. This makes it possible for authenticated attackers, with...

4.3CVSS0.00335EPSS
SaveExploits0References2
CVE
CVE
added 2024/12/18 9:22 a.m.63 views

CVE-2024-12340

CVE-2024-12340 affects the Animation Addons for Elementor WordPress plugin. The vulnerability is a Sensitive Information Exposure via the render function in widgets/content-slider.php and widgets/tabs.php, allowing authenticated attackers with Contributor+ privileges to extract private, pending, ...

4.3CVSS4.4AI score0.00335EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/12/18 9:22 a.m.11 views

CVE-2024-12340 Animation Addons for Elementor <= 1.1.6 - Authenticated (Contributor+) Sensitive Information Exposure via Content Slider and Tabs Widget Elementor Template

The Animation Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.6 via the 'render' function in widgets/content-slider.php and widgets/tabs.php. This makes it possible for authenticated attackers, with...

4.3CVSS6.5AI score0.00335EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/12/18 9:22 a.m.27 views

CVE-2024-12340 Animation Addons for Elementor <= 1.1.6 - Authenticated (Contributor+) Sensitive Information Exposure via Content Slider and Tabs Widget Elementor Template

The Animation Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.6 via the 'render' function in widgets/content-slider.php and widgets/tabs.php. This makes it possible for authenticated attackers, with...

4.3CVSS0.00335EPSS
SaveExploits0References2
NVD
NVD
added 2024/12/18 4:15 a.m.28 views

CVE-2024-12061

The Events Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2.3 via the naeventselementortemplate shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, wi...

4.3CVSS0.00374EPSS
SaveExploits0References2
OSV
OSV
added 2024/12/18 4:15 a.m.9 views

CVE-2024-12061

The Events Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2.3 via the naeventselementortemplate shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, wi...

4.3CVSS5.8AI score0.00374EPSS
SaveExploits0References2
Rows per page
Query Builder