PT-2025-7398

Name of the Vulnerable Software and Affected Versions Prime Addons for Elementor plugin for WordPress versions up to, and including, 2.0.1 Description The issue concerns an Insecure Direct Object Reference vulnerability. This vulnerability is due to missing validation on a user-controlled key in...

CVE-2024-13855: Improper Access Control

The Prime Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.1 via the paeglobalblock shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

WordPress plugin Prime Addons for Elementor: Access control error vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An Access Control...