Lucene search
+L

185 matches found

Cvelist
Cvelist
•added 2024/08/28 2:05 a.m.•54 views

CVE-2024-8030 Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.0.3 - Unauthenticated PHP Object Injection

The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin is vulnerable to PHP Object Injection via deserialization of untrusted input via the ultimatestorekitwishlist cookie in versions up to , and...

9.8CVSS0.01075EPSS
SaveExploits0References2
CVE
CVE
•added 2024/08/28 2:05 a.m.•78 views

CVE-2024-8030

CVE-2024-8030 affects Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, and Woocommerce Slider up to and including 2.0.3. It enables unauthenticated PHP Object Injection via deserialization of input in the _ultimate_store_...

9.8CVSS6.1AI score0.01075EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/28 12:00 a.m.•9 views

CVE-2024-8030: Deserialization of Untrusted Data

The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin is vulnerable to PHP Object Injection via deserialization of untrusted input via the ultimatestorekitwishlist cookie in versions up to , and...

9.8CVSS6.1AI score0.01075EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/08/28 12:00 a.m.•20 views

WordPress plugin Ultimate Store Kit includes Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, and Woocommerce Slider—all of which have security vulnerabilities.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. WordPress plugin Ultimate Store Kit...

9.8CVSS5.9AI score0.01075EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/08/27 12:00 a.m.•17 views

PT-2024-38758

Name of the Vulnerable Software and Affected Versions: The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin versions up to, and including, 2.0.3 Description: The issue is related to PHP Object...

9.8CVSS6.2AI score0.01075EPSS
SaveExploits0References13
osv_cve
osv_cve
•added 2024/08/21 9:15 a.m.•27 views

CVE-2024-5335

The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin is vulnerable to PHP Object Injection via deserialization of untrusted input via the ultimatestorekitcompareproducts cookie in versions up to ...

9.8CVSS6.1AI score0.00852EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/08/21 8:29 a.m.•21 views

CVE-2024-5335 Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 1.6.4 - Unauthenticated PHP Object Injection

The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin is vulnerable to PHP Object Injection via deserialization of untrusted input via the ultimatestorekitcompareproducts cookie in versions up to ...

9.8CVSS6.1AI score0.00852EPSS
SaveExploits0References3
CVE
CVE
•added 2024/08/21 8:29 a.m.•89 views

CVE-2024-5335

CVE-2024-5335 affects the WordPress plugin Ultimate Store Kit Elementor Addons (and related components) up to version 1.6.4. The vulnerability is an unauthenticated PHP Object Injection resulting from deserialization of untrusted input via the _ultimate_store_kit_compare_products cookie. The Word...

9.8CVSS6.1AI score0.00852EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2024/08/21 8:29 a.m.•35 views

CVE-2024-5335 Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 1.6.4 - Unauthenticated PHP Object Injection

The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin is vulnerable to PHP Object Injection via deserialization of untrusted input via the ultimatestorekitcompareproducts cookie in versions up to ...

9.8CVSS0.00852EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/21 12:00 a.m.•8 views

CVE-2024-5335: Deserialization of Untrusted Data

The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin is vulnerable to PHP Object Injection via deserialization of untrusted input via the ultimatestorekitcompareproducts cookie in versions up to ...

9.8CVSS6.1AI score0.00852EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/08/21 12:00 a.m.•25 views

WordPress plugin Ultimate Store Kit has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

10CVSS5.8AI score0.04317EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2024/08/18 2:15 p.m.•18 views

CVE-2024-43342

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 1.6.4...

5.4CVSS5.8AI score0.00254EPSS
SaveExploits0References1
NVD
NVD
•added 2024/08/18 2:15 p.m.•49 views

CVE-2024-43342

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 1.6.4...

6.5CVSS0.00254EPSS
SaveExploits0References1
CVE
CVE
•added 2024/08/18 1:22 p.m.•86 views

CVE-2024-43342

CVE-2024-43342 is a Stored XSS vulnerability in BdThemes Ultimate Store Kit Elementor Addons (affecting up to 1.6.4). The flaw stems from improper input neutralization during web page generation, enabling an attacker with network access to inject scripts that may affect user confidentiality and i...

6.5CVSS5.8AI score0.00254EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/08/18 1:22 p.m.•24 views

CVE-2024-43342 WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 1.6.4...

6.5CVSS5.8AI score0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/08/18 1:22 p.m.•50 views

CVE-2024-43342 WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 1.6.4...

6.5CVSS0.00254EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/18 12:00 a.m.•10 views

CVE-2024-43342: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 1.6.4...

6.5CVSS5.8AI score0.00254EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/18 12:00 a.m.•26 views

PT-2024-30509 · Elementor · Ultimate Store Kit Elementor Addons

Name of the Vulnerable Software and Affected Versions: Ultimate Store Kit Elementor Addons versions 1.6.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This means that ...

6.5CVSS5.9AI score0.00254EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2024/08/18 12:00 a.m.•24 views

WordPress plugin Ultimate Store Kit Elementor Addons has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

6.5CVSS5.5AI score0.00254EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/08/16 1:49 p.m.•25 views

WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 4rCanJ0x! Patchstack Alliance in WordPress Plugin Ultimate Store Kit Elementor Addons versions = 1.6.4...

6.5CVSS5.8AI score0.00254EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder