Better Elementor Addons < 1.4.2 - Authenticated(Contributor+) Local File Inclusion

Description The Better Elementor Addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.1. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files on the server, allowi...

Master Addons for Elementor < 2.0.5.6 - Missing Authorization on Duplicate Post

Description The Master Addons for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the jltmaduplicatorrowactions function in versions up to, and including, 2.0.5.4.1. This makes it possible for authenticated attackers, with...

WordPress Essential Addons for Elementor Plugin <= 5.9.17 is vulnerable to Cross Site Scripting (XSS)

Software Essential Addons for Elementor Type Plugin Vulnerable versions = 5.9.17 Fixed in 5.9.18 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4156 Patch priority Low CVSS severity Low 6.5 Developer WPDeveloper PSID cdf8bfb02af3 Credits wesley wcra...

WordPress plugin Jeg Elementor Kit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress Master Addons for Elementor Plugin <= 2.0.5.9 is vulnerable to Cross Site Scripting (XSS)

Software Master Addons for Elementor Type Plugin Vulnerable versions = 2.0.5.9 Fixed in 2.0.6.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4265 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6c9ef1b8a5d6 Credits...

WordPress Premium Addons for Elementor plugin <= 4.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin Premium Addons for Elementor versions = 4.10.30...

WordPress Elementor ImageBox plugin <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Etan Imanol Castro Aldrete in WordPress Plugin Elementor ImageBox versions = 1.2.8...

WordPress Fancy Elementor Flipbox plugin <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Elementor Flipbox Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Fancy Elementor Flipbox Widget vulnerability discovered by Francesco Carlucci in WordPress Plugin Fancy Elementor Flipbox versions = 2.5.1...

WordPress Eleblog – Elementor Blog And Magazine Addons plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Khalid Patchstack Alliance in WordPress Plugin Eleblog – Elementor Blog And Magazine Addons versions = 1.8...

The vulnerability of the Image Box component in the Jeg Elementor Kit plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Image Box component in the Jeg Elementor Kit plugin of the WordPress content management system is related to the lack of protective measures for website page structures. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

WordPress Fancy Elementor Flipbox Plugin <= 2.5.1 is vulnerable to Cross Site Scripting (XSS)

Software Fancy Elementor Flipbox Type Plugin Vulnerable versions = 2.5.1 Fixed in 2.5.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2349 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID dd388fab11b8 Credits Francesco Carluc...

WordPress Eleblog – Elementor Blog And Magazine Addons Plugin <= 1.8 is vulnerable to Cross Site Scripting (XSS)

Software Eleblog – Elementor Blog And Magazine Addons Type Plugin Vulnerable versions = 1.8 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-33945 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0acce21a6b06 Credits Khalid Yusuf...

WordPress Premium Addons for Elementor Plugin <= 4.10.30 is vulnerable to Cross Site Scripting (XSS)

Software Premium Addons for Elementor Type Plugin Vulnerable versions = 4.10.30 Fixed in 4.10.31 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4203 Patch priority Low CVSS severity Low 6.5 Developer LeapWorx PSID cf4e9df4cfae Credits Ngô Thiên An...

The vulnerability of the Jeg Elementor Kit plugin for WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Jeg Elementor Kit plugin for the WordPress content management system is related to the lack of protection for website structure during the processing of the htmltag attribute. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability of the Testimonial Widget Attributes component in the Jeg Elementor Kit plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Testimonial Widget Attributes component in the Jeg Elementor Kit plugin of the WordPress content management system is related to the lack of protective measures for website structures. Exploiting this vulnerability could allow a malicious actor to perform cross-site...

WordPress RomethemeKit For Elementor plugin <= 1.4.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin RTMKit versions = 1.4.1...

WordPress Exclusive Addons for Elementor plugin <= 2.6.9.1 - Broken Access Control on Post Duplication vulnerability

Broken Access Control on Post Duplication vulnerability discovered by Khalid Patchstack Alliance in WordPress Plugin Exclusive Addons Elementor versions = 2.6.9.1...

WordPress Elementor Addon Elements plugin <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by stealthcopter in WordPress Plugin Elementor Addon Elements versions = 1.13.3...

WordPress Qi Addons For Elementor plugin <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Countdown widget vulnerability discovered by Webbernaut in WordPress Plugin Qi Addons For Elementor versions = 1.7.0...

WordPress Jeg Elementor Kit plugin <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Banner vulnerability

WordPress Jeg Elementor Kit plugin = 2.6.4 - Authenticated Contributor+ Stored Cross-Site Scripting via JKit - Banner vulnerability discovered by wesley wcraft in WordPress Plugin Jeg Elementor Kit versions = 2.6.4...