Lucene search
+L

7476 matches found

CNNVD
CNNVD
added 2024/12/31 12:00 a.m.7 views

WordPress plugin Essential Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS7.7AI score0.00248EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/31 12:00 a.m.9 views

WordPress plugin Premium Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability exists in...

8.8CVSS8.1AI score0.00306EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/31 12:00 a.m.9 views

WordPress plugin Royal Elementor Addons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

6.5CVSS7.7AI score0.00248EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/31 12:00 a.m.6 views

PT-2024-36760 · Leap13 · Premium Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Premium Addons for Elementor versions prior to 4.10.57 Description: The issue is related to a missing authorization vulnerability in the Leap13 Premium Addons for Elementor, which allows accessing functionality not properly constrained by...

8.8CVSS9.4AI score0.00306EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/12/31 12:00 a.m.9 views

WordPress plugin Royal Elementor Addons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.1AI score0.00281EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/12/30 4:27 p.m.12 views

WordPress Move Addons for Elementor plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Move Addons for Elementor versions = 1.3.6...

6.5CVSS6.1AI score0.00336EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/30 4:24 p.m.15 views

WordPress Enter Addons plugin <= 2.1.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Enter Addons versions = 2.1.9...

6.5CVSS6.1AI score0.00336EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/23 6:39 a.m.15 views

WordPress Elementor Header & Footer Builder plugin <= 1.6.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Page Title Widget vulnerability discovered by wesley wcraft in WordPress Plugin Ultimate Addons for Elementor - Lite versions = 1.6.46...

6.4CVSS5.6AI score0.00306EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/12/23 6:33 a.m.8 views

WordPress Element Pack Elementor Addons plugin <= 5.10.12 - Missing Authorization vulnerability

Missing Authorization vulnerability discovered by WordFence in WordPress Plugin Element Pack Elementor Addons versions = 5.10.12...

4.3CVSS7AI score0.00352EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/12/22 2:15 a.m.47 views

CVE-2024-11852

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getlayouts function in all versions up to, and including, 5.10.12. This makes it...

4.3CVSS0.00352EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/12/22 1:41 a.m.18 views

CVE-2024-11852 Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getlayouts function in all versions up to, and including, 5.10.12. This makes it...

4.3CVSS6.8AI score0.00352EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/12/22 1:41 a.m.49 views

CVE-2024-11852 Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getlayouts function in all versions up to, and including, 5.10.12. This makes it...

4.3CVSS0.00352EPSS
SaveExploits0References3
CVE
CVE
added 2024/12/22 1:41 a.m.82 views

CVE-2024-11852

CVE-2024-11852 affects the Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) plugin for WordPress. The root cause is a missing capability check in the get_layouts() function, present in all versions up to and including 5.10.12. This allows a...

4.3CVSS4.4AI score0.00352EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2024/12/22 12:00 a.m.32 views

WordPress plugin Element Pack Elementor Addons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

4.3CVSS8.1AI score0.00352EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2024/12/19 12:23 p.m.9 views

WordPress Royal Elementor Addons plugin <= 1.7.1001 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Royal Elementor Addons versions = 1.7.1001...

4.3CVSS7AI score0.00281EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/19 12:22 p.m.9 views

WordPress Royal Elementor Addons plugin <= 1.7.1001 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Royal Elementor Addons versions = 1.7.1001...

7.1CVSS6.1AI score0.00281EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/19 12:20 p.m.11 views

WordPress Premium Addons for Elementor plugin <= 4.10.56 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Premium Addons for Elementor versions = 4.10.56...

8.8CVSS7AI score0.00306EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/19 12:13 p.m.9 views

WordPress WPMozo Addons Lite for Elementor plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin WPMozo Addons Lite for Elementor versions = 1.2.0...

6.5CVSS6.1AI score0.00231EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/19 4:01 a.m.9 views

WordPress Ultimate Store Kit Elementor Addons plugin <= 2.3.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Ultimate Store Kit Elementor Addons versions = 2.3.0...

4.3CVSS7AI score0.00237EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/18 2:04 p.m.8 views

WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Essential Addons for Elementor versions = 6.0.7...

6.5CVSS6.1AI score0.00248EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder