WordPress Exclusive Addons for Elementor plugin <= 2.6.9.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin Exclusive Addons Elementor versions = 2.6.9.2...

WordPress Element Pack Elementor Addons Plugin <= 5.6.0 is vulnerable to Cross Site Scripting (XSS)

Software Element Pack Elementor Addons Type Plugin Vulnerable versions = 5.6.0 Fixed in 5.6.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32572 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9368f0718fec Credits Ngô Thiên An ancorn from...

WordPress Plugin Exclusive Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerabilit...

WordPress WPBITS Addons For Elementor Page Builder Plugin <= 1.3.4.2 is vulnerable to Cross Site Scripting (XSS)

Software WPBITS Addons For Elementor Page Builder Type Plugin Vulnerable versions = 1.3.4.2 Fixed in 1.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32593 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0a8cef7cc1ce Credits Khalid Yusuf...

WordPress Mega Addons For Elementor plugin <= 1.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Friday Patchstack Alliance in WordPress Plugin Mega Addons For Elementor versions = 1.8...

WordPress ElementsKit Elementor addons plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin Elements kit Elementor addons versions = 3.0.6...

WordPress Element Pack Elementor Addons Plugin <= 5.5.6 is vulnerable to Sensitive Data Exposure

Software Element Pack Elementor Addons Type Plugin Vulnerable versions = 5.5.6 Fixed in 5.6.0 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-2966 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 29f45f5357e3 Credits Krzysztof...

CVE-2024-2137

The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple pricing widgets e.g. Pricing Single, Pricing Icon, Pricing Tab in all versions up to, and including, 2.4.8 due to insufficient input sanitization and output escaping. Thi...

Royal Elementor Addons < 1.3.95 - Contributor+ Stored Cross-Site Scriting

Description The plugin is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3.93 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to...

WordPress Elementor Addons by Livemesh plugin <= 8.3.6 - Authenticated Stored Cross-Site Scripting vulnerability

Authenticated Stored Cross-Site Scripting vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin Livemesh Addons for Elementor versions = 8.3.6...

WordPress Elementor Addons by Livemesh plugin <= 8.3.6 - Authenticated Stored Cross-Site Scripting vulnerability

Authenticated Stored Cross-Site Scripting vulnerability discovered by stealthcopter in WordPress Plugin Livemesh Addons for Elementor versions = 8.3.6...

WordPress Exclusive Addons for Elementor plugin <= 2.6.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Exclusive Addons Elementor versions = 2.6.9...

WordPress Premium Addons for Elementor plugin <= 4.10.27 - Authenticated Stored Cross-Site Scripting vulnerability

Authenticated Stored Cross-Site Scripting vulnerability discovered by Dau Hoang Tai in WordPress Plugin Premium Addons for Elementor versions = 4.10.27...

WordPress Premium Addons for Elementor plugin <= 4.10.24 - Authenticated Stored Cross-Site Scripting vulnerability

Authenticated Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Premium Addons for Elementor versions = 4.10.24...

WordPress Premium Addons for Elementor plugin <= 4.10.24 - Authenticated DOM-Based Stored Cross-Site Scripting vulnerability

Authenticated DOM-Based Stored Cross-Site Scripting vulnerability discovered by wesley wcraft in WordPress Plugin Premium Addons for Elementor versions = 4.10.24...

CVE-2024-24883

Missing Authorization vulnerability in BdThemes Prime Slider – Addons For Elementor.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.11.10...

CVE-2024-24883

Missing Authorization vulnerability in BdThemes Prime Slider – Addons For Elementor.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.11.10...

WordPress Livemesh Addons for Elementor Plugin <= 8.3.6 is vulnerable to Cross Site Scripting (XSS)

Software Livemesh Addons for Elementor Type Plugin Vulnerable versions = 8.3.6 Fixed in 8.3.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2655 Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID 21ff8c74e1bd Credits...

WordPress Premium Addons for Elementor Plugin <= 4.10.27 is vulnerable to Cross Site Scripting (XSS)

Software Premium Addons for Elementor Type Plugin Vulnerable versions = 4.10.27 Fixed in 4.10.28 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2665 Patch priority Low CVSS severity Low 6.5 Developer LeapWorx PSID cacdff610a83 Credits Dau Hoang Tai...

WordPress Premium Addons for Elementor Plugin <= 4.10.16 is vulnerable to Cross Site Scripting (XSS)

Software Premium Addons for Elementor Type Plugin Vulnerable versions = 4.10.16 Fixed in 4.10.17 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0376 Patch priority Low CVSS severity Low 6.4 Developer LeapWorx PSID 2d72e5e37d25 Credits Webbernaut...