Lucene search
+L

7476 matches found

CNNVD
CNNVD
added 2024/03/30 12:00 a.m.12 views

WordPress Plugin Ultimate Addons for Beaver Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.4CVSS7.7AI score0.00433EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/03/30 12:00 a.m.11 views

WordPress Plugin Ultimate Addons for Beaver Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.4CVSS7.7AI score0.00433EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/03/30 12:00 a.m.35 views

WordPress Plugin ElementsKit Elementor addons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

8.8CVSS7.9AI score0.01482EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/03/30 12:00 a.m.18 views

PT-2024-23230 · WordPress · Essential Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Essential Addons for Elementor plugin for WordPress versions up to, and including, 5.9.13 Description: The issue allows authenticated attackers with author-level access and above to inject a PHP Object via deserialization of untrusted inp...

8.8CVSS9.7AI score0.00775EPSS
SaveExploits0References5
NVD
NVD
added 2024/03/29 2:15 p.m.19 views

CVE-2024-30496

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BdThemes Element Pack Elementor Addons.This issue affects Element Pack Elementor Addons: from n/a through 5.5.3...

8.8CVSS8.9AI score0.00577EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/29 2:15 p.m.10 views

CVE-2024-30496

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BdThemes Element Pack Elementor Addons.This issue affects Element Pack Elementor Addons: from n/a through 5.5.3...

8.8CVSS5.8AI score0.00577EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/29 2:15 p.m.11 views

CVE-2024-30423

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BetterAddons Better Elementor Addons allows Stored XSS.This issue affects Better Elementor Addons: from n/a through 1.3.7...

5.4CVSS5.8AI score0.00328EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/29 1:57 p.m.80 views

CVE-2024-30496

CVE-2024-30496 affects BdThemes Element Pack Elementor Addons (Header/Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) up to version 5.5.3. The entry describes an SQL Injection caused by improper neutralization of elements in SQL commands. The vulnerability is classified as netwo...

8.8CVSS8.9AI score0.00577EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/29 1:11 p.m.17 views

CVE-2024-30423 WordPress Better Elementor Addons plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BetterAddons Better Elementor Addons allows Stored XSS.This issue affects Better Elementor Addons: from n/a through 1.3.7...

6.5CVSS6.7AI score0.00328EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/29 1:11 p.m.26 views

CVE-2024-30423 WordPress Better Elementor Addons plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BetterAddons Better Elementor Addons allows Stored XSS.This issue affects Better Elementor Addons: from n/a through 1.3.7...

6.5CVSS6.6AI score0.00328EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/29 1:11 p.m.87 views

CVE-2024-30423

CVE-2024-30423 is an Stored XSS vulnerability in the WordPress plugin Better Elementor Addons, affecting versions from n/a up to 1.3.7. The initial description attributes the flaw to improper neutralization of input during web page generation. Red Hat’s entry provides the same description. The co...

6.5CVSS8.6AI score0.00328EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/03/29 12:25 p.m.9 views

WordPress Shortcode Addons <= 3.2.5 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Peng Zhou Patchstack Alliance in WordPress Plugin Shortcode Addons versions = 3.2.5...

9.1CVSS8.6AI score0.01353EPSS
SaveExploits1Affected Software1
Patchstack
Patchstack
added 2024/03/29 9:27 a.m.12 views

WordPress 130+ Widgets | Best Addons For Elementor – FREE plugin <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Francesco Carlucci in WordPress Plugin Xpro Elementor Addons versions = 1.4.2...

6.4CVSS6.5AI score0.00335EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/03/29 7:15 a.m.23 views

CVE-2024-2280

The Better Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the widget link URL values in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

5.4CVSS6AI score0.00404EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/29 12:00 a.m.10 views

WordPress Plugin Better Elementor Addons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.4CVSS7.3AI score0.00404EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/03/29 12:00 a.m.13 views

WordPress Xpro Elementor Addons Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)

Software Xpro Elementor Addons Type Plugin Vulnerable versions = 1.4.2 Fixed in 1.4.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2250 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7f86252c86a0 Credits Francesco Carlucci...

6.4CVSS5.8AI score0.00335EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/03/29 12:00 a.m.19 views

WordPress Better Elementor Addons Plugin <= 1.4.1 is vulnerable to Cross Site Scripting (XSS)

Software Better Elementor Addons Type Plugin Vulnerable versions = 1.4.1 Fixed in 1.4.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2280 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f7a1785cfb82 Credits Francesco Carluc...

6.4CVSS5.8AI score0.00404EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2024/03/29 12:00 a.m.11 views

WordPress Plugin Element Pack Elementor Addons SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS8.5AI score0.00577EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/29 12:00 a.m.12 views

PT-2024-23422 · Bdthemes · Bdthemes Element Pack Elementor Addons

Name of the Vulnerable Software and Affected Versions: BdThemes Element Pack Elementor Addons versions through 5.5.3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitatio...

8.8CVSS9.7AI score0.00577EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/03/29 12:00 a.m.11 views

WordPress Plugin Better Elementor Addons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Better Elementor...

6.5CVSS7.6AI score0.00328EPSS
SaveExploits0References2
Rows per page
Query Builder