Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

2037 matches found

CVE
CVE•added 2024/06/25 6:57 a.m.•47 views

CVE-2024-3249

CVE-2024-3249: The Zita Elementor Site Library plugin for WordPress is vulnerable to unauthorized data modification due to missing capability checks on import_xml_data, xml_data_import, import_option_data, import_widgets, and import_customizer_settings in all versions up to 1.6.2. Authenticated a...

4.3CVSS4.7AI score0.00343EPSS
SaveExploits0References3
OSV
OSV•added 2024/06/24 1:15 p.m.•6 views

CVE-2024-37092

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP Local File Inclusion.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0...

8.8CVSS5.8AI score0.00525EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2024/06/24 12:23 p.m.•15 views

CVE-2024-37092 WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP Local File Inclusion.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0...

8.5CVSS6.9AI score0.00525EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2024/06/24 12:23 p.m.•34 views

CVE-2024-37092 WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP Local File Inclusion.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0...

8.5CVSS0.00525EPSS
SaveExploits0References1
NVD
NVD•added 2024/06/24 12:15 p.m.•40 views

CVE-2024-37091

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in StylemixThemes Consulting Elementor Widgets, StylemixThemes Masterstudy Elementor Widgets allows OS Command Injection.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0;...

9.9CVSS0.01243EPSS
SaveExploits0References2
OSV
OSV•added 2024/06/24 12:15 p.m.•6 views

CVE-2024-37091

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in StylemixThemes Consulting Elementor Widgets, StylemixThemes Masterstudy Elementor Widgets allows OS Command Injection.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0;...

8.8CVSS5.8AI score0.01243EPSS
SaveExploits0References2
OSV
OSV•added 2024/06/24 12:15 p.m.•5 views

CVE-2024-37089

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP Local File Inclusion.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0...

9.8CVSS5.8AI score0.00609EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2024/06/24 12:9 p.m.•15 views

CVE-2024-37091 WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Remote Code Execution (RCE) vulnerability

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in StylemixThemes Consulting Elementor Widgets, StylemixThemes Masterstudy Elementor Widgets allows OS Command Injection.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0;...

9.9CVSS9.3AI score0.01243EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2024/06/24 12:9 p.m.•48 views

CVE-2024-37091 WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Remote Code Execution (RCE) vulnerability

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in StylemixThemes Consulting Elementor Widgets, StylemixThemes Masterstudy Elementor Widgets allows OS Command Injection.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0;...

9.9CVSS0.01243EPSS
SaveExploits0References2
CVE
CVE•added 2024/06/24 12:9 p.m.•79 views

CVE-2024-37091

CVE-2024-37091 describes an OS Command Injection in StylemixThemes Consulting Elementor Widgets and StylemixThemes Masterstudy Elementor Widgets. Underlying issue is improper neutralization of command elements that enables injection via affected widgets. Affected: Consulting Elementor Widgets up ...

9.9CVSS9.3AI score0.01243EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment•added 2024/06/24 12:7 p.m.•13 views

CVE-2024-37089 WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Unauthenticated Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP Local File Inclusion.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0...

9CVSS6.9AI score0.00609EPSS
SaveExploits0References1
CVE
CVE•added 2024/06/24 12:7 p.m.•60 views

CVE-2024-37089

CVE-2024-37089 is an instance of an Unauthenticated Local File Inclusion via path traversal in the WordPress plugin Consulting Elementor Widgets (affected versions: up to 1.3.0). The root cause is an improper limitation of a pathname to a restricted directory, enabling an attacker to access arbit...

9.8CVSS9.4AI score0.00609EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist•added 2024/06/24 12:7 p.m.•36 views

CVE-2024-37089 WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Unauthenticated Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP Local File Inclusion.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0...

9CVSS0.00609EPSS
SaveExploits0References1
CNNVD
CNNVD•added 2024/06/24 12:0 a.m.•6 views

WordPress plugin Consulting Elementor Widgets Path Traversal Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

9.8CVSS6.8AI score0.00609EPSS
SaveExploits0References3
CNNVD
CNNVD•added 2024/06/24 12:0 a.m.•16 views

WordPress plugin Consulting Elementor Widgets OS Command Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An operating system command...

9.9CVSS7.4AI score0.01243EPSS
SaveExploits0References5
CNNVD
CNNVD•added 2024/06/24 12:0 a.m.•8 views

WordPress plugin Consulting Elementor Widgets Path Traversal Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

8.8CVSS6.6AI score0.00525EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2024/06/24 12:0 a.m.•10 views

PT-2024-27288 · Stylemixthemes · Stylemixthemes Consulting Elementor Widgets

Name of the Vulnerable Software and Affected Versions: StylemixThemes Consulting Elementor Widgets versions 1.3.0 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability, in StylemixThemes...

9.8CVSS6.8AI score0.00609EPSS
SaveExploits0References4
Patchstack
Patchstack•added 2024/06/20 7:18 a.m.•8 views

WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Consulting Elementor Widgets versions = 1.3.0...

8.8CVSS7AI score0.00525EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2024/06/20 7:6 a.m.•6 views

WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Consulting Elementor Widgets versions = 1.3.0...

9.9CVSS7.5AI score0.01243EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2024/06/20 7:4 a.m.•9 views

WordPress Consulting Elementor Widgets plugin <= 1.3.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Consulting Elementor Widgets versions = 1.3.0...

8.8CVSS8.1AI score0.0053EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder