CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7476 matches found

Positive Technologies•added 2024/04/28 12:00 a.m.•13 views

PT-2024-25305 · Wpzoom · Wpzoom Addons For Elementor

Name of the Vulnerable Software and Affected Versions: WPZOOM Addons for Elementor versions 1.1.35 and earlier Description: The issue affects WPZOOM Addons for Elementor, allowing Stored XSS due to improper neutralization of input during web page generation. This is a Cross-site Scripting...

6.5CVSS5.8AI score0.00404EPSS

SaveExploits0References7

OSV•added 2024/04/27 10:15 a.m.•10 views

CVE-2024-3309

The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Widget's attributes in all versions up to, and including, 1.7.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

5.4CVSS5.9AI score0.0032EPSS

SaveExploits0References2

Cvelist•added 2024/04/27 9:37 a.m.•32 views

CVE-2024-3309 Qi Addons For Elementor <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown widget

6.4CVSS5.8AI score0.0032EPSS

SaveExploits0References2

CNNVD•added 2024/04/27 12:00 a.m.•10 views

WordPress plugin Qi Addons For Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.4CVSS6.8AI score0.0032EPSS

SaveExploits0References3

Positive Technologies•added 2024/04/27 12:00 a.m.•19 views

PT-2024-25113 · WordPress · Qi Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Qi Addons For Elementor plugin for WordPress versions up to, and including, 1.7.0 Description: The issue is related to Stored Cross-Site Scripting via the Countdown Widget's attributes due to insufficient input sanitization and output escapin...

6.4CVSS5.9AI score0.0032EPSS

SaveExploits0References6

OSV•added 2024/04/26 9:15 a.m.•6 views

CVE-2024-3962

The Product Addons & Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ppomuploadfile function in all versions up to, and including, 32.0.18. This makes it possible for unauthenticated attackers to upload arbitrary files...

9.8CVSS6.4AI score0.0137EPSS

SaveExploits0References3

Vulnrichment•added 2024/04/26 8:29 a.m.•18 views

CVE-2024-3962 Product Addons & Fields for WooCommerce <= 32.0.18 - Unauthenticated Arbitrary File Upload via ppom_upload_file

9.8CVSS6.6AI score0.0137EPSS

SaveExploits0References3

OSV•added 2024/04/26 8:15 a.m.•10 views

CVE-2024-3890

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Calendly widget in all versions up to, and including, 3.10.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

5.4CVSS5.9AI score0.0034EPSS

SaveExploits0References2

Patchstack•added 2024/04/26 12:24 a.m.•11 views

WordPress Happy Addons for Elementor plugin <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendly Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Calendly Widget vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin Happy Addons for Elementor versions = 3.10.6...

6.4CVSS5.8AI score0.0034EPSS

SaveExploits0References1Affected Software1

CNNVD•added 2024/04/26 12:00 a.m.•10 views

WordPress plugin Happy Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.4CVSS6.8AI score0.0034EPSS

SaveExploits0References3

Patchstack•added 2024/04/26 12:00 a.m.•19 views

WordPress Happy Addons for Elementor Plugin <= 3.10.6 is vulnerable to Cross Site Scripting (XSS)

Software Happy Addons for Elementor Type Plugin Vulnerable versions = 3.10.6 Fixed in 3.10.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3890 Patch priority Low CVSS severity Low 6.5 Developer Leevio PSID 827a04c2f627 Credits Ngô Thiên An ancorn...

6.4CVSS5.8AI score0.0034EPSS

SaveExploits0References3Affected Software1

CNNVD•added 2024/04/26 12:00 a.m.•15 views

WordPress plugin Product Addons & Fields for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

9.8CVSS6.8AI score0.0137EPSS

SaveExploits0References4

Positive Technologies•added 2024/04/26 12:00 a.m.•10 views

PT-2024-28269 · WordPress · Happy Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Happy Addons for Elementor plugin for WordPress versions up to, and including, 3.10.5 Description: The issue is related to Stored Cross-Site Scripting via the Calendly widget due to insufficient input sanitization and output escaping on...

6.4CVSS5.9AI score0.0034EPSS

SaveExploits0References6

Patchstack•added 2024/04/25 5:23 p.m.•12 views

WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Unauthenticated Arbitrary Post/Page Deletion vulnerability

Unauthenticated Arbitrary Post/Page Deletion vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Piotnet Addons For Elementor Pro versions = 7.1.17...

7.5CVSS7AI score0.00566EPSS