Lucene search
+L

7423 matches found

Cvelist
Cvelist
added 2025/11/06 3:55 p.m.37 views

CVE-2025-62047 WordPress Case Addons plugin < 1.3.0 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Case-Themes Case Addons case-addons.This issue affects Case Addons: from n/a through 1.3.0...

9.9CVSS0.00418EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/06 3:55 p.m.50 views

CVE-2025-62047

CVE-2025-62047 concerns WordPress Case Addons (&lt; 1.3.0) where an Unrestricted Upload of File with Dangerous Type exists in the Case Addons plugin. The CNVD/Red Hat/NVD entries confirm the issue affects Case Addons and describe a path to remote code execution via arbitrary file uploads. The Wor...

9.9CVSS6.6AI score0.00418EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/06 6:13 a.m.23 views

CVE-2025-10873

The ElementInvader Addons for Elementor WordPress plugin before 1.4.1 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses due to missing authorization on the elementinvaderaddonsforelementorformssendform action...

5.3CVSS7AI score0.00229EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.10 views

PT-2025-45328

Name of the Vulnerable Software and Affected Versions King Addons for Elementor versions through 51.1.36 Description An incorrect privilege assignment exists in King Addons for Elementor, allowing for privilege escalation. The issue allows an attacker to gain elevated privileges within the system...

9.8CVSS6.9AI score0.00399EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.12 views

WordPress plugin Case Addons 安全漏洞

The WordPress Case Addons plugin is a plugin for the Elementor page builder that offers a wide range of functional components and templates for enhancing website design and content presentation. The WordPress Case Addons plugin suffers from a file upload vulnerability that stems from the...

9.9CVSS7.5AI score0.00418EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.13 views

PT-2025-45329

Name of the Vulnerable Software and Affected Versions King Addons for Elementor versions through 51.1.36 Description The software contains a flaw that permits the upload of files with dangerous types, potentially allowing the upload of a web shell to a web server. Recommendations Update King Addo...

10CVSS6.8AI score0.00466EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.10 views

WordPress plugin King Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

9.8CVSS8.8AI score0.00399EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.8 views

WordPress plugin King Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

10CVSS8.9AI score0.00466EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.14 views

PT-2025-45312

Unrestricted Upload of File with Dangerous Type vulnerability in Case-Themes Case Addons case-addons.This issue affects Case Addons: from n/a through 1.3.0...

9.9CVSS7AI score0.00418EPSS
SaveExploits0References2
NVD
NVD
added 2025/11/05 6:15 a.m.14 views

CVE-2025-10873

The ElementInvader Addons for Elementor WordPress plugin before 1.4.1 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses due to missing authorization on the elementinvaderaddonsforelementorformssendform action...

5.3CVSS0.00229EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/05 6:00 a.m.19 views

CVE-2025-10873 Elementinvader Addons for Elementor < 1.4.1 – Unauthenticated Arbitrary Email Sending

The ElementInvader Addons for Elementor WordPress plugin before 1.4.1 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses due to missing authorization on the elementinvaderaddonsforelementorformssendform action...

0.00229EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/05 6:00 a.m.36 views

CVE-2025-10873

CVE-2025-10873 : ElementInvader Addons for Elementor (WordPress) before 1.4.1 allows an unauthenticated user to send arbitrary emails to arbitrary addresses due to a missing authorization check on the elementinvader_addons_for_elementor_forms_send_form action. Affected plugin versions are prior t...

5.3CVSS6.6AI score0.00229EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/11/05 6:00 a.m.8 views

CVE-2025-10873 Elementinvader Addons for Elementor < 1.4.1 – Unauthenticated Arbitrary Email Sending

The ElementInvader Addons for Elementor WordPress plugin before 1.4.1 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses due to missing authorization on the elementinvaderaddonsforelementorformssendform action...

6.6AI score0.00229EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/05 12:00 a.m.12 views

WordPress plugin ElementInvader Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.7AI score0.00229EPSS
SaveExploits0References2
CNVD
CNVD
added 2025/11/05 12:00 a.m.11 views

WordPress King Addons for Elementor plugin elevation of privilege vulnerability

WordPress King Addons for Elementor plugin is an extension plugin designed specifically for the Elementor page builder, offering a large number of preset templates, components, and features for quickly building WordPress websites. The WordPress King Addons for Elementor plugin suffers from an...

9.8CVSS7.2AI score0.0927EPSS
SaveExploits4References1
Positive Technologies
Positive Technologies
added 2025/11/05 12:00 a.m.15 views

PT-2025-45081

Name of the Vulnerable Software and Affected Versions ElementInvader Addons for Elementor versions prior to 1.4.1 Description The ElementInvader Addons for Elementor WordPress plugin is affected by a missing authorization check. An unauthenticated user can send arbitrary emails to arbitrary...

5.3CVSS6.7AI score0.00229EPSS
SaveExploits0References4
CNVD
CNVD
added 2025/11/05 12:00 a.m.10 views

WordPress Essential Addons for Elementor plugin Authorization Missing Vulnerability

WordPress Essential Addons for Elementor plugin is an extension plugin designed for Elementor page builder, offering over 80 advanced widgets and modules for creating professional web designs. The WordPress Essential Addons for Elementor plugin suffers from an Authorization Missing vulnerability...

2.7CVSS6.8AI score0.00213EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/01 12:04 p.m.18 views

CVE-2025-64352

Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Addons for Elementor: from n/a through = 6.2.4...

2.7CVSS7AI score0.00213EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/01 6:58 a.m.14 views

CVE-2025-8489

The King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor plugin for WordPress is vulnerable to privilege escalation in versions 24.12.92 to 51.1.14 . This is due to the plugin not properly restricting the roles that users can register with. This makes it...

9.8CVSS6.6AI score0.0927EPSS
SaveExploits4References1
EUVD
EUVD
added 2025/10/31 12:30 p.m.8 views

EUVD-2025-37340

Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Addons for Elementor: from n/a through = 6.2.4...

2.7CVSS6.5AI score0.00213EPSS
SaveExploits0References2
Rows per page
Query Builder