Lucene search
+L

7468 matches found

Patchstack
Patchstack
added 2024/03/25 12:00 a.m.16 views

WordPress Piotnet Addons For Elementor Plugin <= 2.4.25 is vulnerable to Cross Site Scripting (XSS)

Software Piotnet Addons For Elementor Type Plugin Vulnerable versions = 2.4.25 Fixed in 2.4.26 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29934 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0a721fbaedbd Credits Khalid Yusuf Required...

6.5CVSS6.9AI score0.00364EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/03/25 12:00 a.m.11 views

WordPress Livemesh Addons for WPBakery Page Builder Plugin <= 3.7 is vulnerable to Cross Site Scripting (XSS)

Software Livemesh Addons for WPBakery Page Builder Type Plugin Vulnerable versions = 3.7 Fixed in 3.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30183 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f0d0b4d75da7 Credits Khalid Yusuf...

6.5CVSS6.9AI score0.0036EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/03/23 3:15 p.m.11 views

CVE-2024-24840

Missing Authorization vulnerability in BdThemes Element Pack Elementor Addons.This issue affects Element Pack Elementor Addons: from n/a through 5.4.11...

5.4CVSS7.3AI score0.00288EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/23 3:15 p.m.28 views

CVE-2024-24840

Missing Authorization vulnerability in BdThemes Element Pack Elementor Addons.This issue affects Element Pack Elementor Addons: from n/a through 5.4.11...

5.4CVSS4.7AI score0.00288EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/23 2:45 p.m.16 views

CVE-2024-24840 WordPress Element Pack Elementor Addons plugin <= 5.4.11 - Broken Access Control on Duplicate Post vulnerability

Missing Authorization vulnerability in BdThemes Element Pack Elementor Addons.This issue affects Element Pack Elementor Addons: from n/a through 5.4.11...

4.3CVSS5AI score0.00288EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/23 2:45 p.m.73 views

CVE-2024-24840

CVE-2024-24840 : BdThemes Element Pack Elementor Addons (WordPress plugin)

5.4CVSS8.6AI score0.00288EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/03/23 1:57 a.m.67 views

CVE-2024-2131

The CVE-2024-2131 entry pertains to Move Addons for Elementor (WordPress). It affects all versions up to 1.2.9 and describes a Stored Cross-Site Scripting (XSS) via the plugin’s infobox and button widget due to insufficient input sanitization and output escaping on user-supplied attributes. Authe...

6.4CVSS7.3AI score0.00343EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/03/23 12:00 a.m.9 views

WordPress Plugin Move Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.4CVSS7.7AI score0.00343EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/03/23 12:00 a.m.10 views

PT-2024-20608 · Bdthemes · Bdthemes Element Pack Elementor Addons

Name of the Vulnerable Software and Affected Versions: BdThemes Element Pack Elementor Addons versions 5.4.11 and earlier Description: The issue is related to a Missing Authorization vulnerability in BdThemes Element Pack Elementor Addons. Recommendations: For versions 5.4.11 and earlier, update ...

5.4CVSS9.3AI score0.00288EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/03/23 12:00 a.m.10 views

WordPress Plugin Element Pack Elementor Addons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.4CVSS8.2AI score0.00288EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/22 12:00 a.m.8 views

PT-2024-18853 · WordPress · Move Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Move Addons for Elementor plugin for WordPress versions up to, and including, 1.2.9 Description: The issue is related to Stored Cross-Site Scripting via the plugin's infobox and button widget due to insufficient input sanitization and output...

6.4CVSS7.9AI score0.00343EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2024/03/20 6:48 a.m.12 views

CVE-2024-2129 WPBITS Addons For Elementor Page Builder <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

The WPBITS Addons For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's heading widget in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

6.4CVSS7.4AI score0.00452EPSS
SaveExploits0References3
CVE
CVE
added 2024/03/20 6:48 a.m.63 views

CVE-2024-2129

CVE-2024-2129: WPBITS Addons For Elementor Page Builder for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin’s heading widget in all versions up to and including 1.3.4.2, due to insufficient input sanitization and output escaping on user-supplied attributes. Attack scenario: ...

6.4CVSS7.4AI score0.00452EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/20 12:00 a.m.9 views

PT-2024-18851 · WordPress · Wpbits Addons For Elementor Page Builder

Name of the Vulnerable Software and Affected Versions: WPBITS Addons For Elementor Page Builder plugin for WordPress versions up to, and including, 1.3.4.2 Description: The issue is related to Stored Cross-Site Scripting via the plugin's heading widget due to insufficient input sanitization and...

6.4CVSS8AI score0.00452EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/03/20 12:00 a.m.10 views

WordPress Plugin WPBITS Addons For Elementor Page Builder Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.4CVSS5.8AI score0.00452EPSS
SaveExploits0References3
NVD
NVD
added 2024/03/19 4:15 p.m.25 views

CVE-2024-29108

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Leevio Happy Addons for Elementor allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.10.1...

6.5CVSS6.5AI score0.00316EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/19 4:15 p.m.6 views

CVE-2024-29108

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Leevio Happy Addons for Elementor allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.10.1...

5.4CVSS5.8AI score0.00316EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/19 4:15 p.m.24 views

CVE-2024-29106

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Leap13 Premium Addons for Elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.10.16...

6.5CVSS6.5AI score0.00316EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/19 4:15 p.m.10 views

CVE-2024-29106

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Leap13 Premium Addons for Elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.10.16...

5.4CVSS5.8AI score0.00316EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/19 3:37 p.m.15 views

CVE-2024-29106 WordPress Premium Addons for Elementor plugin <= 4.10.16 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Leap13 Premium Addons for Elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.10.16...

6.5CVSS6.8AI score0.00316EPSS
SaveExploits0References1
Rows per page
Query Builder