CVE-2024-9541

The News Kit Elementor Addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.1 via the render function in includes/widgets/canvas-menu/canvas-menu.php. This makes it possible for authenticated attackers, with Contributor-level access...

CVE-2024-9541

The News Kit Elementor Addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.1 via the render function in includes/widgets/canvas-menu/canvas-menu.php. This makes it possible for authenticated attackers, with Contributor-level access...

CVE-2024-9541 News Kit Elementor Addons <= 1.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Canvas Menu Elementor Template

The News Kit Elementor Addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.1 via the render function in includes/widgets/canvas-menu/canvas-menu.php. This makes it possible for authenticated attackers, with Contributor-level access...

CVE-2024-9541

CVE-2024-9541 affects News Kit Elementor Addons for WordPress up to version 1.2.1, where the render function in includes/widgets/canvas-menu/canvas-menu.php exposes sensitive Elementor template data to authenticated users with Contributor-level access or higher. The vulnerability is a Sensitive I...

CVE-2024-9541 News Kit Elementor Addons <= 1.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Canvas Menu Elementor Template

The News Kit Elementor Addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.1 via the render function in includes/widgets/canvas-menu/canvas-menu.php. This makes it possible for authenticated attackers, with Contributor-level access...

WordPress plugin News Kit Elementor Addons 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

WordPress Qi Addons For Elementor Plugin <= 1.8.0 is vulnerable to Sensitive Data Exposure

Software Qi Addons For Elementor Type Plugin Vulnerable versions = 1.8.0 Fixed in 1.8.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-9530 Patch priority Low CVSS severity Low 4.3 Developer Qode Interactive PSID 6f7683e106bb Credits Ankit Patel...

WordPress News Kit Elementor Addons plugin <= 1.2.1 - Authenticated (Contributor+) Sensitive Information Exposure vulnerability

Authenticated Contributor+ Sensitive Information Exposure vulnerability discovered by Nishiv in WordPress Plugin News Kit Elementor Addons versions = 1.2.1...

WordPress myCred Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin myCred Elementor versions = 1.2.6...

WordPress Mega Elements – Addons for Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Mega Elements versions = 1.2.6...

WordPress WPKoi Templates for Elementor plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by ghsinfosec Patchstack Alliance in WordPress Plugin WPKoi Templates for Elementor versions = 3.1.0...

WordPress Local Business Addons For Elementor plugin <= 1.1.5 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin Local Business Addons For Elementor versions = 1.1.5...

WordPress Web Bricks Addons for Elementor plugin <= 1.1.1 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin Web Bricks Addons for Elementor versions = 1.1.1...

WordPress Extra Privacy for Elementor plugin <= 0.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Extra Privacy for Elementor versions = 0.1.3...

WordPress myCred Elementor Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)

Software myCred Elementor Type Plugin Vulnerable versions = 1.2.6 Fixed in 1.2.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49702 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 91faf3362d6d Credits João Pedro S Alcântara Kinorth Requir...

WordPress News Kit Elementor Addons Plugin <= 1.2.1 is vulnerable to Sensitive Data Exposure

Software News Kit Elementor Addons Type Plugin Vulnerable versions = 1.2.1 Fixed in 1.2.2 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-9541 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1aff69c2a359 Credits Nishiv Required...

WordPress Extra Privacy for Elementor Plugin <= 0.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Extra Privacy for Elementor Type Plugin Vulnerable versions = 0.1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49654 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7a3a2af9d08c Credits Mika Required privileg...

WordPress Web Bricks Addons for Elementor Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Web Bricks Addons for Elementor Type Plugin Vulnerable versions = 1.1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49665 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3f32b8aa058a Credits Gab Required privilege...

WordPress Custom Icons for Elementor Plugin <= 0.3.3 is vulnerable to Arbitrary File Upload

Software Custom Icons for Elementor Type Plugin Vulnerable versions = 0.3.3 Fixed in 0.3.4 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-49676 Patch priority Low CVSS severity Low 6.6 Developer Claim ownership PSID f3c8312f66dc Credits tahu.datar Required privilege...

WordPress WPKoi Templates for Elementor Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)

Software WPKoi Templates for Elementor Type Plugin Vulnerable versions = 3.1.0 Fixed in 3.1.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-49679 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 90b6d1565959 Credits ghsinfose...