WordPress Premium Addons for Elementor plugin <= 4.10.22 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Abu Hurayra Patchstack Alliance in WordPress Plugin Premium Addons for Elementor versions = 4.10.22...

WordPress Royal Elementor Addons plugin <= 1.3.93 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Abu Hurayra Patchstack Alliance in WordPress Plugin Royal Elementor Addons versions = 1.3.93...

WordPress Royal Elementor Addons Plugin <= 1.3.93 is vulnerable to Cross Site Scripting (XSS)

Software Royal Elementor Addons Type Plugin Vulnerable versions = 1.3.93 Fixed in 1.3.95 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31236 Patch priority Low CVSS severity Low 6.5 Developer WProyal PSID a6e2f5daffc2 Credits Khalid Yusuf Required privilege...

Happy Addons for Elementor < 3.10.5 - Incorrect Authorization to Information Exposure

Description The Happy Addons for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to insufficient authorization on the duplicatething function in all versions up to, and including, 3.10.4. This makes it possible for attackers, with contributor-level access and above...

Mageia: Security Advisory (MGASA-2024-0091)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Premium Addons for Elementor Plugin <= 4.10.22 is vulnerable to Sensitive Data Exposure

Software Premium Addons for Elementor Type Plugin Vulnerable versions = 4.10.22 Fixed in 4.10.23 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-31278 Patch priority Low CVSS severity Low 4.3 Developer LeapWorx PSID e07cd20a1a96 Credits Khalid Yusuf...

CVE-2024-2803 ElementsKit Elementor addons <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the countdown widget in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

WordPress Plugin ElementsKit Elementor addons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

Elementor Addons, Widgets and Enhancements – Stax <= 1.4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The Elementor Addons, Widgets and Enhancements – Stax plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'Heading' widgets in all versions up to, and including, 1.4.4.1 due to insufficient input sanitization and output escaping on user supplied...

WordPress Elements kit Elementor addons Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS)

Software Elements kit Elementor addons Type Plugin Vulnerable versions = 3.0.7 Fixed in 3.1.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2803 Patch priority Low CVSS severity Low 6.5 Developer Wpmet PSID 88e697466103 Credits Webbernaut Required...

Shortcode Addons <= 3.2.5 - Authenticated (Admin+) Arbitrary File Upload

Description The Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 3.2.5. This makes it possible for authenticated attackers, wi...

WordPress Creative Addons for Elementor plugin <= 1.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by João G. Barbosa 4rCanJ0x! in WordPress Plugin Creative Addons for Elementor versions = 1.5.12...

WordPress Plugin Creative Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress Creative Addons for Elementor Plugin <= 1.5.12 is vulnerable to Cross Site Scripting (XSS)

Software Creative Addons for Elementor Type Plugin Vulnerable versions = 1.5.12 Fixed in 1.6.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2924 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0180e7d18902 Credits João G...

PT-2024-22836 · WordPress · Creative Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Creative Addons for Elementor plugin for WordPress versions up to, and including, 1.5.12 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's widgets, allowing...

WordPress Ultimate Addons for Beaver Builder – Lite plugin <= 1.5.7 - Multiple Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Multiple Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Francesco Carlucci in WordPress Plugin Ultimate Addons for Beaver Builder – Lite versions = 1.5.7...

WordPress Essential Addons for Elementor plugin <= 5.9.13 - Authenticated (Author+) PHP Object Injection via error_resetpassword vulnerability

Authenticated Author+ PHP Object Injection via errorresetpassword vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin Essential Addons for Elementor versions = 5.9.13...

WordPress PowerPack Addons for Elementor plugin <= 2.7.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via *_html_tag* vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via htmltag vulnerability discovered by wesley wcraft in WordPress Plugin PowerPack Addons for Elementor versions = 2.7.17...

WordPress PowerPack Addons for Elementor plugin <= 2.7.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Tweet Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Twitter Tweet Widget vulnerability discovered by wesley wcraft in WordPress Plugin PowerPack Addons for Elementor versions = 2.7.18...

WordPress Essential Addons for Elementor plugin <= 5.9.13 - Unauthenticated Sensitive Information Exposure vulnerability

Unauthenticated Sensitive Information Exposure vulnerability discovered by Ankit Patel in WordPress Plugin Essential Addons for Elementor versions = 5.9.13...