Lucene search
+L

108 matches found

CNNVD
CNNVD
•added 2025/01/15 12:00 a.m.•18 views

WordPress plugin Elementor Addon Elements 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

4.3CVSS8.2AI score0.00522EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/15 12:00 a.m.•1 views

CVE-2024-13215: Exposure of Private Personal Information to an Unauthorized Actor

The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.10 via the 'render' function in modules/modal-popup/widgets/modal-popup.php. This makes it possible for authenticated attackers, with Contributor-level acce...

4.3CVSS5.7AI score0.00522EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/18 9:22 a.m.•14 views

CVE-2024-12340 Animation Addons for Elementor <= 1.1.6 - Authenticated (Contributor+) Sensitive Information Exposure via Content Slider and Tabs Widget Elementor Template

The Animation Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.6 via the 'render' function in widgets/content-slider.php and widgets/tabs.php. This makes it possible for authenticated attackers, with...

4.3CVSS6.5AI score0.00344EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/18 12:00 a.m.•5 views

CVE-2024-12340: Exposure of Sensitive Information to an Unauthorized Actor

The Animation Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.6 via the 'render' function in widgets/content-slider.php and widgets/tabs.php. This makes it possible for authenticated attackers, with...

4.3CVSS5.7AI score0.00344EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/18 12:00 a.m.•18 views

WordPress plugin Animation Addons for Elementor 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

4.3CVSS7.8AI score0.00344EPSS
SaveExploits0References2
OSV
OSV
•added 2024/12/17 1:15 p.m.•18 views

CVE-2024-10356

The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.4.8 in inc/Widgets/accordion/output/content.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

4.3CVSS7.3AI score0.00429EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/17 12:00 a.m.•3 views

CVE-2024-10356: Exposure of Sensitive Information to an Unauthorized Actor

The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.4.8 in inc/Widgets/accordion/output/content.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

4.3CVSS5.6AI score0.00429EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/17 12:00 a.m.•21 views

PT-2024-16215 · Unknown · Elementsready Addons For Elementor

Name of the Vulnerable Software and Affected Versions: ElementsReady Addons for Elementor versions up to, and including, 6.4.8 Description: The issue allows authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data due to...

4.3CVSS9.4AI score0.00429EPSS
SaveExploits0References8
OSV
OSV
•added 2024/11/26 11:22 a.m.•20 views

CVE-2024-8899

The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.9 via the rendercontent function in class/elements/views/class-tabs-view.php. This makes it possible for authenticated attackers, with Contributor-level access and...

4.3CVSS7.3AI score0.00407EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/11/26 12:00 a.m.•24 views

PT-2024-39307 · WordPress · Jeg Elementor Kit

Name of the Vulnerable Software and Affected Versions: Jeg Elementor Kit plugin for WordPress versions up to, and including, 2.6.9 Description: The issue allows authenticated attackers with Contributor-level access and above to extract sensitive private, pending, and draft template data. This is...

4.3CVSS6.6AI score0.00407EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/11/26 12:00 a.m.•19 views

WordPress plugin Jeg Elementor Kit 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information...

4.3CVSS7.9AI score0.00407EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/21 11:02 a.m.•76 views

CVE-2024-10316

CVE-2024-10316 involves the Stratum – Elementor Widgets WordPress plugin. The vulnerability affects all versions up to and including 1.4.4 and resides in includes/templates/content-switcher.php, enabling authenticated attackers with Contributor+ privileges to exfiltrate sensitive template data (p...

4.3CVSS4.3AI score0.00523EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/21 12:00 a.m.•2 views

CVE-2024-9542: Exposure of Sensitive Information to an Unauthorized Actor

The Sky Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.1 via the render function in modules/content-switcher/widgets/content-switcher.php. This makes it possible for authenticated attackers, with Contributor-leve...

4.3CVSS5.7AI score0.00308EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/21 12:00 a.m.•1 views

CVE-2024-10316: Exposure of Sensitive Information to an Unauthorized Actor

The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.4 in includes/templates/content-switcher.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract...

4.3CVSS5.6AI score0.00523EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/20 12:00 a.m.•16 views

WordPress plugin The Plus Addons for Elementor 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

4.3CVSS7.7AI score0.00345EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/10/29 11:01 a.m.•16 views

CVE-2024-10360 Move Addons for Elementor <= 1.3.5 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates

The Move Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the render function in includes/widgets/accordion/widget.php, includes/widgets/remote-template/widget.php, and other widget.php files. This makes it...

4.3CVSS6.7AI score0.00375EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•4 views

CVE-2024-10360: Exposure of Sensitive Information to an Unauthorized Actor

The Move Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the render function in includes/widgets/accordion/widget.php, includes/widgets/remote-template/widget.php, and other widget.php files. This makes it...

4.3CVSS5.7AI score0.00375EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/29 12:00 a.m.•19 views

WordPress plugin Move Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.4AI score0.00375EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/10/29 12:00 a.m.•18 views

PT-2024-16179 · Unknown · Exclusive Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Exclusive Addons for Elementor versions up to, and including, 2.7.4 Description: The issue allows authenticated attackers with Contributor-level access and above to extract sensitive private, pending, and draft template data via the render...

4.3CVSS6.5AI score0.00438EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2024/10/29 12:00 a.m.•16 views

WordPress plugin Exclusive Addons for Elementor 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

4.3CVSS6AI score0.00438EPSS
SaveExploits0References2
Rows per page
Query Builder