Lucene search
+L

380 matches found

NVD
NVD
•added 2023/07/10 4:15 p.m.•63 views

CVE-2023-28989

Cross-Site Request Forgery CSRF vulnerability in weDevs Happy Addons for Elementor plugin = 3.8.2 versions...

8.8CVSS5.8AI score0.00321EPSS
SaveExploits0References1
OSV
OSV
•added 2023/07/10 4:15 p.m.•15 views

CVE-2023-28989

Cross-Site Request Forgery CSRF vulnerability in weDevs Happy Addons for Elementor plugin = 3.8.2 versions...

8.8CVSS7.3AI score0.00321EPSS
SaveExploits0References1
Prion
Prion
•added 2023/07/10 4:15 p.m.•35 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in weDevs Happy Addons for Elementor plugin = 3.8.2 versions...

6.8CVSS8.8AI score0.00321EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/07/10 12:51 p.m.•68 views

CVE-2023-28989

CVE-2023-28989 is a CSRF vulnerability in the WordPress plugin Happy Addons for Elementor (weDevs) affecting versions

8.8CVSS6.5AI score0.00321EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/07/10 12:51 p.m.•66 views

CVE-2023-28989 WordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in weDevs Happy Addons for Elementor plugin = 3.8.2 versions...

4.3CVSS9.1AI score0.00321EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/07/10 12:51 p.m.•20 views

CVE-2023-28989 WordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in weDevs Happy Addons for Elementor plugin = 3.8.2 versions...

4.3CVSS7.1AI score0.00321EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/07/10 12:00 a.m.•25 views

Wrodpress Plugin Happy Addons for Elementor 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS8.1AI score0.00321EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/10 12:00 a.m.•3 views

CVE-2023-28989: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in weDevs Happy Addons for Elementor plugin = 3.8.2 versions...

8.8CVSS8.1AI score0.00321EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/03/29 12:00 a.m.•23 views

WordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Happy Addons for Elementor Type Plugin Vulnerable versions = 3.8.2 Fixed in 3.8.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-28989 Patch priority Low CVSS severity Low 4.3 Developer Leevio PSID 6f449a2eda61 Credits Muhammad Daffa...

8.8CVSS6.6AI score0.00321EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2023/03/21 12:00 a.m.•14 views

WordPress Happy Addons for Elementor Plugin <= 3.7.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Happy Addons for Elementor Type Plugin Vulnerable versions = 3.7.2 Fixed in 3.8.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47150 Patch priority Low CVSS severity Low 4.3 Developer Leevio PSID 9306d3ab752f Credits István Márton...

5.9AI score0.00113EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
•added 2021/06/04 12:00 a.m.•46 views

WordPress Happy Addons for Elementor Plugin < 2.24.0 XSS Vulnerability

The WordPress plugin Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

5.4CVSS5.6AI score0.00636EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/05/21 12:00 a.m.•17 views

WordPress plugin cross-site scripting vulnerability (CNVD-2021-39959)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in Happy Addo...

5.4CVSS5.5AI score0.00636EPSS
SaveExploits1References1
NVD
NVD
•added 2021/05/17 5:15 p.m.•27 views

CVE-2021-24292

The Happy Addons for Elementor WordPress plugin before 2.24.0, Happy Addons Pro for Elementor WordPress plugin before 1.17.0 have a number of widgets that are vulnerable to stored Cross-Site ScriptingXSS by lower-privileged users such as contributors, all via a similar method: The “Card” widget...

5.4CVSS0.00636EPSS
SaveExploits1References2
OSV
OSV
•added 2021/05/17 5:15 p.m.•16 views

CVE-2021-24292

The Happy Addons for Elementor WordPress plugin before 2.24.0, Happy Addons Pro for Elementor WordPress plugin before 1.17.0 have a number of widgets that are vulnerable to stored Cross-Site ScriptingXSS by lower-privileged users such as contributors, all via a similar method: The “Card” widget...

5.4CVSS5.8AI score0.00636EPSS
SaveExploits1References2
Prion
Prion
•added 2021/05/17 5:15 p.m.•30 views

Cross site scripting

The Happy Addons for Elementor WordPress plugin before 2.24.0, Happy Addons Pro for Elementor WordPress plugin before 1.17.0 have a number of widgets that are vulnerable to stored Cross-Site ScriptingXSS by lower-privileged users such as contributors, all via a similar method: The “Card” widget...

3.5CVSS5.4AI score0.00636EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb
•added 2021/05/17 5:15 p.m.•9 views

CVE-2021-24292

The Happy Addons for Elementor WordPress plugin before 2.24.0, Happy Addons Pro for Elementor WordPress plugin before 1.17.0 have a number of widgets that are vulnerable to stored Cross-Site ScriptingXSS by lower-privileged users such as contributors, all via a similar method: The “Card” widget...

5.4CVSS6AI score0.00636EPSS
SaveExploits1References3Affected Software2
CVE
CVE
•added 2021/05/17 4:48 p.m.•68 views

CVE-2021-24292

The CVE concerns WordPress plugins Happy Addons for Elementor Free (&lt;2.24.0) and Happy Addons Pro for Elementor (

5.4CVSS5.4AI score0.00636EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/17 12:00 a.m.•6 views

CVE-2021-24292: Improper Neutralization of Input During Web Page Generation

The Happy Addons for Elementor WordPress plugin before 2.24.0, Happy Addons Pro for Elementor WordPress plugin before 1.17.0 have a number of widgets that are vulnerable to stored Cross-Site ScriptingXSS by lower-privileged users such as contributors, all via a similar method: The “Card” widget...

5.4CVSS5.8AI score0.00636EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/05/17 12:00 a.m.•14 views

WordPress plugin 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in Happy Addo...

5.4CVSS5.2AI score0.00636EPSS
SaveExploits1References3
WPVulnDB
WPVulnDB
•added 2021/04/26 12:00 a.m.•30 views

Happy Addons for Elementor Free < 2.24.0 and Pro < 1.17.0 - Contributor+ Stored XSS

The plugins have a number of widgets that are vulnerable to stored Cross-Site ScriptingXSS by lower-privileged users such as contributors, all via a similar method: The “Card” widget accepts a “titletag” parameter. Although the element control lists a fixed set of possible html tags, it is possib...

5.4CVSS0.00636EPSS
SaveExploits1References1Affected Software2
Rows per page
Query Builder