Lucene search
+L

7524 matches found

RedhatCVE
RedhatCVE
added 2026/01/23 9:17 p.m.15 views

CVE-2025-69312

Unrestricted Upload of File with Dangerous Type vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Upload a Web Shell to a Web Server.This issue affects Xpro Elementor Addons: from n/a through = 1.4.19.1...

9.1CVSS5.4AI score0.00353EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/23 9:16 p.m.14 views

CVE-2025-68999

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons allows Blind SQL Injection.This issue affects Happy Addons for Elementor: from n/a through = 3.20.4...

8.5CVSS5.6AI score0.00268EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2026/01/23 9:15 p.m.14 views

CVE-2025-31413

Cross-Site Request Forgery CSRF vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Cross Site Request Forgery.This issue affects Element Pack Elementor Addons: from n/a through = 8.3.13...

4.3CVSS5.4AI score0.00142EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/23 9:14 p.m.12 views

CVE-2026-22468

Missing Authorization vulnerability in AbsolutePlugins Absolute Addons For Elementor absolute-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Absolute Addons For Elementor: from n/a through = 1.0.14...

4.3CVSS5.4AI score0.00197EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/01/23 6:58 p.m.13 views

WordPress Happy Addons for Elementor plugin <= 3.20.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by knani alaaeddine iwd in WordPress Plugin Happy Addons for Elementor versions = 3.20.4...

8.5CVSS5.8AI score0.00268EPSS
SaveExploits2Affected Software1
NVD
NVD
added 2026/01/23 3:16 p.m.12 views

CVE-2026-24605

Missing Authorization vulnerability in pencilwp X Addons for Elementor x-addons-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects X Addons for Elementor: from n/a through = 1.0.23...

4.3CVSS0.00265EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/23 3:16 p.m.10 views

CVE-2026-24594

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in livemesh Livemesh Addons for WPBakery Page Builder addons-for-visual-composer allows Stored XSS.This issue affects Livemesh Addons for WPBakery Page Builder: from n/a through = 3.9.4...

5.9CVSS0.00232EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/23 2:29 p.m.39 views

CVE-2026-24605 WordPress X Addons for Elementor plugin <= 1.0.23 - Broken Access Control vulnerability

Missing Authorization vulnerability in pencilwp X Addons for Elementor x-addons-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects X Addons for Elementor: from n/a through = 1.0.23...

4.3CVSS0.00265EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:29 p.m.5 views

CVE-2026-24605

Missing Authorization vulnerability in pencilwp X Addons for Elementor x-addons-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects X Addons for Elementor: from n/a through = 1.0.23...

4.3CVSS5.9AI score0.00265EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/23 2:29 p.m.3 views

CVE-2026-24605 WordPress X Addons for Elementor plugin <= 1.0.23 - Broken Access Control vulnerability

Missing Authorization vulnerability in pencilwp X Addons for Elementor x-addons-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects X Addons for Elementor: from n/a through = 1.0.23...

4.3CVSS5.4AI score0.00265EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/23 2:29 p.m.23 views

CVE-2026-24605

CVE-2026-24605 concerns WordPress plugin X Addons for Elementor with versions up to 1.0.23. The Red Hat/NVD entries describe a Missing Authorization vulnerability caused by misconfigured access control security levels, enabling unauthorized access. Public feeds corroborate the affected software a...

4.3CVSS5.4AI score0.00265EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:29 p.m.8 views

CVE-2026-24594

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in livemesh Livemesh Addons for WPBakery Page Builder addons-for-visual-composer allows Stored XSS.This issue affects Livemesh Addons for WPBakery Page Builder: from n/a through = 3.9.4...

4.8CVSS5.9AI score0.00232EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/23 2:29 p.m.41 views

CVE-2026-24594 WordPress Livemesh Addons for WPBakery Page Builder plugin <= 3.9.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in livemesh Livemesh Addons for WPBakery Page Builder addons-for-visual-composer allows Stored XSS.This issue affects Livemesh Addons for WPBakery Page Builder: from n/a through = 3.9.4...

5.9CVSS0.00232EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/23 2:29 p.m.31 views

CVE-2026-24594

CVE-2026-24594 concerns Livemesh Addons for WPBakery Page Builder (WordPress plugin) with versions up to and including 3.9.4. The Red Hat, NVD, CVE List, and PatchStack entries confirm an authenticated Stored XSS flaw caused by improper input neutralization during web page generation. Impact is s...

5.9CVSS5.4AI score0.00232EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/23 2:29 p.m.4 views

CVE-2026-24594 WordPress Livemesh Addons for WPBakery Page Builder plugin <= 3.9.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in livemesh Livemesh Addons for WPBakery Page Builder addons-for-visual-composer allows Stored XSS.This issue affects Livemesh Addons for WPBakery Page Builder: from n/a through = 3.9.4...

5.9CVSS5.4AI score0.00232EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/23 12:00 a.m.16 views

WordPress plugin X Addons for Elementor has security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added to th...

4.3CVSS5.8AI score0.00265EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/23 12:00 a.m.15 views

PT-2026-4429

Name of the Vulnerable Software and Affected Versions Livemesh Addons for WPBakery Page Builder versions through 3.9.4 Description The software contains a flaw related to improper input handling during web page creation, which can lead to Stored Cross-site Scripting XSS. This means that malicious...

4.8CVSS5.3AI score0.00232EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/01/23 12:00 a.m.22 views

PT-2026-4439

Name of the Vulnerable Software and Affected Versions X Addons for Elementor versions through 1.0.23 Description An issue exists in X Addons for Elementor where incorrectly configured access control security levels can be exploited, leading to a missing authorization condition. The vulnerability...

4.3CVSS5.3AI score0.00265EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/01/23 12:00 a.m.16 views

WordPress plugin Livemesh Addons for WPBakery Page Builder has security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added to a...

5.9CVSS5.6AI score0.00232EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.29 views

CVE-2026-22468

Missing Authorization vulnerability in AbsolutePlugins Absolute Addons For Elementor absolute-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Absolute Addons For Elementor: from n/a through = 1.0.14...

4.3CVSS0.00197EPSS
SaveExploits0References1
Rows per page
Query Builder