7476 matches found
cve-2026-7665
CVE-2026-7665 — Unauthenticated Information Disclosure in Essential Addons for Elementor...
WordPress The Plus Addons for Elementor <4.1.12 - Cross-Site Scripting
WordPress The Plus Addons for Elementor plugin before 4.1.12 is susceptible to cross-site scripting. The plugin does not properly sanitize some of its fields in the heplusmorepost AJAX action, which is exploitable by both unauthenticated and authenticated users. An attacker can inject arbitrary...
ShortCode Addons - Unauthenticated Options Update
WordPress plugin Shortcode Addons = 3.0.2 contains an unauthenticated arbitrary option update caused by insufficient access controls in the plugin, letting attackers modify options without authentication. id: CVE-2022-34487 info: name: ShortCode Addons - Unauthenticated Options Update author:...
WordPress Elementor Lite 5.7.1 - Arbitrary Password Reset
Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This issue affects Essential Addons for Elementor: from 5.4.0 through 5.7.1. id: CVE-2023-32243 info: name: WordPress Elementor Lite 5.7.1 - Arbitrary Password Reset author:...
Premium Addons for Elementor - Unauthenticated Information Disclosure
Premium Addons for Elementor plugin for WordPress version 4.11.53 and below contains an unauthenticated information disclosure vulnerability.The vulnerability exists due to a missing authorization check in the gettemplatecontent AJAX handler, allowing unauthenticated attackers to retrieve private...
Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect
WordPress Plus Addons for Elementor Page Builder before 4.1.10 did not validate a redirect parameter on a specifically crafted URL before redirecting the user to it, leading to an open redirect issue. id: CVE-2021-24358 info: name: Plus Addons for Elementor Page Builder 4.1.10 - Open Redirect...
The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass
The Plus Addons for Elementor plugin before version 4.1.7 allowed attackers to bypass authentication, gain admin access, and create accounts with elevated roles, even when registration was disabled and the Login widget was inactive. id: CVE-2021-24175 info: name: The Plus Addons for Elementor Pag...
ff-password-exporter
FF Password Exporter It can be difficult to export your passwords from Firefox. Since version 57 of Firefox Quantum existing password export addons no longer work. Mozilla provides no other official alternatives. FF Password Exporter makes it quick and easy to export all of your passwords from...
CVE-2024-31114
CVE-2024-31114 - Exploit RCE per Shortcode Addons di WordPress Shortcode Addons = 3.2.5 – Upload arbitrario di file autenticato Admin+ ID CVE: CVE-2024-31114 Punteggio CVSS: 9.1 Critico 🛠️ Descrizione della vulnerabilità Il plugin Shortcode Addons – with Visual Composer, Divi, Beaver Builder, and...
CVE-2026-4885
CVE-2026-4885 Piotnet Addons for Elementor Pro = 7.1.70 - Caricamento File Arbitrario Non Autenticato → RCE Descrizione : Il plugin Piotnet Addons for Elementor Pro per WordPress è vulnerabile al caricamento arbitrario di file a causa della mancanza di validazione del tipo di file nella funzione...
CVE-2025-1639
🔓 Script di Exploit per CVE-2025-1639 📝 Descrizione Il plugin Animation Addons for Elementor Pro per WordPress è vulnerabile all'installazione non autorizzata di plugin arbitrari a causa di un mancato controllo delle capability nella funzione installelementorpluginhandler in tutte le versioni fin...
EVCer
EVCer | CVE-2023-0159 - Extensive VC Addons für den WPBakery Page Builder Automatisches Massentool zur Überprüfung der Schwachstelle in CVE-2023-0159 - Extensive VC Addons für WPBakery Page Builder install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh...
essential-addons-for-elementor-xss-poc
🔍 Rilevatore di vulnerabilità XSS per Essential Addons for Elementor 🚨 Informazioni critiche Questo strumento è solo a scopo di ricerca sulla sicurezza e di applicazione di patch. Non utilizzarlo per danneggiare siti. Se trovi siti vulnerabili, segnalali in modo responsabile ai proprietari in mod...
CVE-2023-32243
CVE-2023-32243 Essential Addons für Elementor - Unautorisierte Account-Übernahme. PoC ist jetzt veröffentlicht. Es wurde nur zu Bildungs-/Forschungszwecken erstellt! Nutzung auf eigene Gefahr!...
WordPress Royal Elementor Addons Plugin <= 1.3.78 - Arbitrary File Upload
Arbitrary File Upload vulnerability in WordPress Royal Elementor Addons Plugin. This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. This vulnerability has been fixed in version...
CVE-2023-47840
CVE-2023-47840 Qode Essential Addons = 1.5.2 - Fehlende Autorisierung für authentifizierte Abonnenten+ beliebige Plugin-Installation/-Aktivierung Beschreibung: Das Qode Essential Addons-Plugin für WordPress ist anfällig für unbefugte Änderungen von Daten aufgrund einer fehlenden...
CVE-2023-32243
CVE-2023-32243. Essential Addons for Elementor 5.4.0-5.7.1 - अप्रमाणित विशेषाधिकार वृद्धि Info प्लगइन पासवर्ड रीसेट कुंजी को सत्यापित नहीं करता है, जो अप्रमाणित हमलावरों को संबंधित ईमेल या उपयोगकर्ता नाम जानकर किसी भी खाते का पासवर्ड अपनी इच्छानुसार कुछ भी रीसेट करने और उन तक पहुँच प्राप्त करने क...
CVE-2023-5360
CVE-2023-5360 Un EXPLOIT open-source per Il plugin WordPress The Royal Elementor Addons and Templates precedente alla versione 1.3.79 non valida correttamente i file caricati, il che potrebbe consentire a utenti non autenticati di caricare file arbitrari, come PHP, e ottenere RCE. Indice...
CVE-2025-32641
🛡️ Anant Addons for Elementor = 1.1.5 - CSRF para Instalação Arbitrária de Plugins 🧨 CVE-2025-32641 Vulnerabilidade Cross-Site Request Forgery CSRF em anantaddons – Anant Addons for Elementor Este problema afeta as versões: de versão desconhecida até 1.1.5 Pontuação Base : 9.6 CRÍTICO Vetor CVSS :...
