Lucene search
+L

7425 matches found

CNNVD
CNNVD
added 2023/10/31 12:00 a.m.14 views

WordPress Plugin Royal Elementor Addons and Templates Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

9.8CVSS7.7AI score0.81695EPSS
SaveExploits18References5
ATTACKERKB
ATTACKERKB
added 2023/10/31 12:00 a.m.205 views

CVE-2023-5360

The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE. Recent assessments: jheysel-r7 at November 29, 2023 9:40pm UTC reported: The Royal...

9.8CVSS9.7AI score0.81695EPSS
SaveIn wildExploits18References3
OSV
OSV
added 2023/10/27 9:15 p.m.7 views

CVE-2023-46211

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder plugin = 3.19.14 versions...

5.4CVSS6.7AI score0.0031EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/10/27 8:22 p.m.17 views

CVE-2023-46211 WordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.14 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder plugin = 3.19.14 versions...

6.5CVSS5.8AI score0.0031EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/27 8:22 p.m.78 views

CVE-2023-46211

CVE-2023-46211 is a stored Cross-Site Scripting (XSS) vulnerability in the Brainstorm Force Ultimate Addons for WPBakery Page Builder plugin, affected versions

6.5CVSS5.5AI score0.0031EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/10/27 12:00 a.m.5 views

WordPress plugin Ultimate Addons for WPBakery Page Builder Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6AI score0.0031EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/21 12:00 a.m.29 views

The vulnerability of the Royal Elementor Addons and Templates plugin of the WordPress content management system allows a hacker to execute arbitrary code by loading a specially created file.

The vulnerability of the Royal Elementor Addons and Templates plugin of the WordPress content management system is related to the ability to download files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by downloading ...

10CVSS8.2AI score0.81695EPSS
SaveExploits18References6Affected Software1
Patchstack
Patchstack
added 2023/10/19 12:00 a.m.15 views

WordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.14 is vulnerable to Cross Site Scripting (XSS)

Software Ultimate Addons for WPBakery Page Builder Type Plugin Vulnerable versions = 3.19.14 Fixed in 3.19.15 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46211 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID e15e4a96621e...

6.5CVSS5.7AI score0.0031EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2023/10/11 12:00 a.m.20 views

WordPress The Royal Elementor Addons Plugin < 1.3.76 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:royal-elementor-addons:royalelementoraddons"; if description...

8.8CVSS7AI score0.00214EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/06 1:15 p.m.31 views

CVE-2022-47175

Cross-Site Request Forgery CSRF vulnerability in P Royal Royal Elementor Addons and Templates plugin = 1.3.75 versions...

8.8CVSS5.8AI score0.00214EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/06 1:15 p.m.11 views

CVE-2022-47175

Cross-Site Request Forgery CSRF vulnerability in P Royal Royal Elementor Addons and Templates plugin = 1.3.75 versions...

8.8CVSS5.8AI score0.00214EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/06 1:15 p.m.27 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in P Royal Royal Elementor Addons and Templates plugin = 1.3.75 versions...

6.8CVSS8.7AI score0.00214EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/10/06 12:45 p.m.87 views

CVE-2022-47175

CVE-2022-47175 affects the WordPress plugin “Royal Elementor Addons and Templates” up to version 1.3.75. The root cause is a Cross-Site Request Forgery (CSRF) vulnerability. PatchStack and related sources indicate the issue can be exploited without authentication, with CVSS v3.1 data showing impa...

8.8CVSS6.5AI score0.00214EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/06 12:45 p.m.29 views

CVE-2022-47175 WordPress Royal Elementor Addons Plugin <= 1.3.75 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in P Royal Royal Elementor Addons and Templates plugin = 1.3.75 versions...

4.3CVSS9.1AI score0.00214EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/10/06 12:00 a.m.19 views

PT-2023-15218 · WordPress · The Royal Elementor Addons/Templates

Name of the Vulnerable Software and Affected Versions: P Royal Royal Elementor Addons and Templates plugin versions 1.3.75 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performin...

8.8CVSS7.6AI score0.00214EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/10/06 12:00 a.m.9 views

WordPress Plugin Royal Elementor Addons and Templates Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.5AI score0.00214EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/10/03 12:00 a.m.5 views

PT-2023-6274 · WordPress · The Royal Elementor Addons/Templates

Name of the Vulnerable Software and Affected Versions: Royal Elementor Addons and Templates versions prior to 1.3.79 Description: The issue is related to unlimited file upload of dangerous types. Exploitation of this issue may allow a remote attacker to execute arbitrary code by uploading a...

9.8CVSS9.7AI score0.81695EPSS
SaveExploits18References32
Positive Technologies
Positive Technologies
added 2023/09/30 12:00 a.m.8 views

PT-2023-9164 · Unknown +1 · Prestashop +1

Name of the Vulnerable Software and Affected Versions: PrestaShop Buy Addons baproductzoommagnifier module versions 1.0.16 and before Description: The issue is related to a lack of protection against SQL structure attacks in the BaproductzoommagnifierZoomModuleFrontController::run method of the...

10CVSS9.8AI score0.00748EPSS
SaveExploits1References4
NVD
NVD
added 2023/09/27 3:19 p.m.29 views

CVE-2023-41236

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Happy addons Happy Elementor Addons Pro plugin = 2.8.0 versions...

7.1CVSS6.2AI score0.00351EPSS
SaveExploits0References1
OSV
OSV
added 2023/09/27 3:19 p.m.7 views

CVE-2023-41236

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Happy addons Happy Elementor Addons Pro plugin = 2.8.0 versions...

6.1CVSS7.3AI score0.00351EPSS
SaveExploits0References1
Rows per page
Query Builder