Lucene search
+L

9429 matches found

CVE
CVE
•added 2024/03/27 10:21 a.m.•89 views

CVE-2024-30177

CVE-2024-30177 affects Exclusive Addons for Elementor. It is a Stored XSS in the plugin’s web page generation due to improper input handling, affecting Exclusive Addons Elementor versions from n/a up to 2.6.8. The available documents specify the vulnerability type and affected range but do not pr...

6.5CVSS8.6AI score0.00317EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/03/27 10:16 a.m.•35 views

CVE-2024-29934 WordPress Piotnet Addons For Elementor plugin <= 2.4.25 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Piotnet Piotnet Addons For Elementor allows Stored XSS.This issue affects Piotnet Addons For Elementor: from n/a through 2.4.25...

6.5CVSS6.6AI score0.00364EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/27 10:16 a.m.•21 views

CVE-2024-29934 WordPress Piotnet Addons For Elementor plugin <= 2.4.25 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Piotnet Piotnet Addons For Elementor allows Stored XSS.This issue affects Piotnet Addons For Elementor: from n/a through 2.4.25...

6.5CVSS6.7AI score0.00364EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/27 10:16 a.m.•78 views

CVE-2024-29934

CVE-2024-29934 is an XSS vulnerability in Piotnet Addons For Elementor. Connected sources confirm a Stored XSS condition during web page generation affecting Piotnet Addons For Elementor up to version 2.4.25 (range: n/a through 2.4.25). The vulnerability is triggered through input handling in the...

6.5CVSS8.6AI score0.00364EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/27 8:15 a.m.•42 views

CVE-2024-29920

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through 1.2.9...

6.5CVSS6.5AI score0.00289EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/27 8:15 a.m.•20 views

CVE-2024-29920

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through 1.2.9...

5.4CVSS5.8AI score0.00289EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/27 7:15 a.m.•17 views

CVE-2024-29913

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS Elementor Addons allows Stored XSS.This issue affects Tutor LMS Elementor Addons: from n/a through 2.1.3...

5.4CVSS5.8AI score0.00336EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/27 7:15 a.m.•32 views

CVE-2024-29913

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS Elementor Addons allows Stored XSS.This issue affects Tutor LMS Elementor Addons: from n/a through 2.1.3...

6.5CVSS6.4AI score0.00336EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/27 7:15 a.m.•14 views

CVE-2024-29911

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jewel Theme Master Addons for Elementor allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1...

5.4CVSS7.3AI score0.00343EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/27 7:13 a.m.•78 views

CVE-2024-29920

CVE-2024-29920 corresponds to a Stored XSS in Move Addons for Elementor plugin for WordPress, caused by improper neutralization of input during web page generation. The affected component is Move Addons for Elementor versions 1.2.9 and earlier; exploit path is via a cross-site scripting payload s...

6.5CVSS5.2AI score0.00289EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/03/27 7:13 a.m.•46 views

CVE-2024-29920 WordPress Move Addons for Elementor plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through 1.2.9...

6.5CVSS6.7AI score0.00289EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/27 7:02 a.m.•44 views

CVE-2024-29913 WordPress Tutor LMS Elementor Addons plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS Elementor Addons allows Stored XSS.This issue affects Tutor LMS Elementor Addons: from n/a through 2.1.3...

6.5CVSS6.6AI score0.00336EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/27 7:02 a.m.•29 views

CVE-2024-29913 WordPress Tutor LMS Elementor Addons plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS Elementor Addons allows Stored XSS.This issue affects Tutor LMS Elementor Addons: from n/a through 2.1.3...

6.5CVSS6.7AI score0.00336EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/27 6:59 a.m.•35 views

CVE-2024-29911 WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jewel Theme Master Addons for Elementor allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1...

6.5CVSS6.6AI score0.00343EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/27 3:15 a.m.•24 views

CVE-2024-2139

The Master Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing Table widget in all versions up to, and including, 2.0.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS5.7AI score0.0034EPSS
SaveExploits0References2
OSV
OSV
•added 2024/03/27 3:15 a.m.•15 views

CVE-2024-2139

The Master Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing Table widget in all versions up to, and including, 2.0.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

5.4CVSS5.9AI score0.0034EPSS
SaveExploits0References2
OSV
OSV
•added 2024/03/27 3:15 a.m.•12 views

CVE-2024-2210

The The Plus Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.4.1 via the Team Member Listing widget. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrar...

6.4CVSS7.8AI score0.00483EPSS
SaveExploits0References2
OSV
OSV
•added 2024/03/27 3:15 a.m.•15 views

CVE-2024-2203

The The Plus Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.4.1 via the Clients widget. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files on t...

8.8CVSS6.3AI score0.00594EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/27 12:00 a.m.•17 views

WordPress Plugin Move Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.5CVSS5.7AI score0.00289EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/27 12:00 a.m.•17 views

WordPress Plugin The Plus Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.4CVSS8.5AI score0.00483EPSS
SaveExploits0References3
Rows per page
Query Builder