Lucene search
K

375 matches found

OSV
OSV
added 2024/03/13 4:15 p.m.1 views

CVE-2024-1536

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's event calendar widget in all versions up to, and including, 5.9.9 due to insufficient input sanitization and outpu...

7.4CVSS5.9AI score0.00549EPSS
Exploits0References2
OSV
OSV
added 2024/03/13 4:15 p.m.4 views

CVE-2024-1537

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Data Table widget in all versions up to, and including, 5.9.9 due to insufficient input sanitization and output...

6.4CVSS7.4AI score0.00421EPSS
Exploits0References2
CVE
CVE
added 2024/03/13 3:26 p.m.46 views

CVE-2024-1537

CVE-2024-1537 impacts the WordPress plugin Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders. The vulnerability is a Stored Cross-Site Scripting (XSS) in the plugin’s Data Table widget, caused by insufficient input sanitization and output escaping on ...

6.4CVSS6.1AI score0.00421EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2024/03/13 3:26 p.m.51 views

CVE-2024-1536

CVE-2024-1536 affects the Essential Addons for Elementor plugin for WordPress (up to version 5.9.9). The issue is Stored XSS via the plugin’s Event Calendar widget caused by insufficient input sanitization and output escaping on user-supplied attributes. Attackers with contributor+ privileges can...

7.4CVSS6.8AI score0.00549EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2024/03/13 12:0 a.m.2 views

WordPress Plugin Essential Addons for Elementor Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.4CVSS5.7AI score0.00549EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/03/13 12:0 a.m.10 views

WordPress Plugin Essential Addons for Elementor Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.4CVSS5.7AI score0.00421EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/03/13 12:0 a.m.5 views

PT-2024-18123 · WordPress · Essential Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Essential Addons for Elementor plugin for WordPress versions up to, and including, 5.9.9 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Data Table widget due to insufficient input sanitization and output...

6.4CVSS7.9AI score0.00421EPSS
Exploits0References5
OSV
OSV
added 2024/02/29 1:43 a.m.4 views

CVE-2024-1276

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Content Ticker arrow attribute in all versions up to, and including, 5.9.8 due to insufficient input sanitization and outpu...

6.4CVSS6AI score
Exploits0References3
OSV
OSV
added 2024/02/29 1:43 a.m.2 views

CVE-2024-1236

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Filterable Controls label icon parameter in all versions up to, and including, 5.9.8 due to insufficient input sanitization...

6.4CVSS6AI score0.00469EPSS
Exploits0References4
OSV
OSV
added 2024/02/29 1:43 a.m.2 views

CVE-2024-1171

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Filterable Gallery Widget in all versions up to, and including, 5.9.8 due to insufficient input sanitization and...

5.4CVSS5.9AI score0.00427EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/02/29 12:0 a.m.4 views

WordPress Plugin Essential Addons for Elementor Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.4CVSS5.9AI score0.00427EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/02/29 12:0 a.m.3 views

WordPress Plugin Essential Addons for Elementor Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.4CVSS5.9AI score0.00469EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/02/29 12:0 a.m.2 views

WordPress Plugin Essential Addons for Elementor Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.4CVSS5.9AI score0.00446EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/02/29 12:0 a.m.3 views

WordPress Plugin Essential Addons for Elementor Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.4CVSS5.9AI score0.00456EPSS
Exploits0References5
Cvelist
Cvelist
added 2024/02/20 6:56 p.m.22 views

CVE-2024-1171 Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Filterable Gallery Widget in all versions up to, and including, 5.9.8 due to insufficient input sanitization and...

5.4CVSS5.2AI score0.00427EPSS
Exploits0References2
CVE
CVE
added 2024/02/20 6:56 p.m.88 views

CVE-2024-1171

The CVE-2024-1171 entry concerns the WordPress plugin Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders. A Stored Cross-Site Scripting (XSS) vulnerability exists in the Filterable Gallery Widget for versions up to and including 5.9.8, caused by insuff...

5.4CVSS5.6AI score0.00427EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2024/02/20 6:56 p.m.87 views

CVE-2024-1172

CVE-2024-1172 Fluently affects the WordPress plugin Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders. A Stored Cross-Site Scripting flaw exists in the Accordion widget due to insufficient input sanitization and output escaping, enabling authenticated...

5.4CVSS5.6AI score0.00456EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2024/02/20 6:56 p.m.85 views

CVE-2024-1276

CVE-2024-1276 affects the WordPress plugin Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders. All versions up to and including 5.9.8 are vulnerable to a Stored XSS via the Content Ticker arrow attribute caused by insufficient input sanitization and ou...

6.4CVSS6.1AI score0.00446EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2024/02/20 6:56 p.m.75 views

CVE-2024-1236

CVE-2024-1236 – Essential Addons for Elementor (Lite) vulnerability summary: A stored cross-site scripting flaw exists in the Filterable Controls label icon parameter, affecting all versions up to and including 5.9.8. The issue stems from insufficient input sanitization and output escaping, enabl...

6.4CVSS6.1AI score0.00469EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/02/20 12:0 a.m.3 views

PT-2024-17199 · WordPress · Essential Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Essential Addons for Elementor plugin for WordPress versions up to, and including, 5.9.8 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Filterable Gallery Widget due to insufficient input sanitization an...

5.4CVSS8.1AI score0.00427EPSS
Exploits0References5
Rows per page
Query Builder