WordPress Shortcode Addons Plugin <= 3.2.5 is vulnerable to Arbitrary File Upload

Software Shortcode Addons Type Plugin Vulnerable versions = 3.2.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-31114 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID 25bf030daa64 Credits Peng Zhou Required privilege Administrator...

PT-2024-23350 · Unknown · Better Elementor Addons

Name of the Vulnerable Software and Affected Versions: Better Elementor Addons versions 1.3.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

VulnCheck KEV: CVE-2024-30435

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor.This issue affects Nexter Blocks: from n/a through = 3.2.5...

PT-2024-19567 · WordPress · Better Elementor Addons

Name of the Vulnerable Software and Affected Versions: The Better Elementor Addons plugin for WordPress versions up to, and including, 1.4.1 Description: The issue is related to Stored Cross-Site Scripting via the widget link URL values due to insufficient input sanitization and output escaping o...

WordPress Element Pack Elementor Addons Plugin <= 5.5.3 is vulnerable to SQL Injection

Software Element Pack Elementor Addons Type Plugin Vulnerable versions = 5.5.3 Fixed in 5.5.4 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-30496 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 3d0133376896 Credits Rafie Muhammad Patchstack Required...

Element Pack Elementor Addons < 5.5.4 - Contributor+ Stored XSS

Description The plugin is vulnerable to Stored Cross-Site Scripting via the link URL due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute...

WordPress Beaver Builder Addons by WPZOOM Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)

Software Beaver Builder Addons by WPZOOM Type Plugin Vulnerable versions = 1.3.4 Fixed in 1.3.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30424 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e8570b0b8002 Credits Khalid Yusuf Required...

WordPress Better Elementor Addons Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS)

Software Better Elementor Addons Type Plugin Vulnerable versions = 1.3.7 Fixed in 1.3.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30423 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f9eec0bdba86 Credits Khalid Yusuf Required privileg...

CVE-2024-29792

CVE-2024-29792 affects the WordPress plugin Unlimited Elements for Elementor (Free Widgets, Addons, Templates) up to version 1.5.93. The vulnerability is a reflected XSS caused by improper neutralization of input during web page generation, enabling attackers to inject scripts via a crafted URL. ...

CVE-2024-30186

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Prime Slider – Addons For Elementor allows Stored XSS.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.13.1...

CVE-2024-30186

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Prime Slider – Addons For Elementor allows Stored XSS.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.13.1...

CVE-2024-30185

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Element Pack Elementor Addons allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 5.5.3...

CVE-2024-30185

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Element Pack Elementor Addons allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 5.5.3...

CVE-2024-30183

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Livemesh Livemesh Addons for WPBakery Page Builder allows Stored XSS.This issue affects Livemesh Addons for WPBakery Page Builder: from n/a through 3.7...

CVE-2024-30186 WordPress Prime Slider plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Prime Slider – Addons For Elementor allows Stored XSS.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.13.1...

CVE-2024-30185 WordPress Element Pack Elementor Addons plugin <= 5.5.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Element Pack Elementor Addons allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 5.5.3...

CVE-2024-30185

CVE-2024-30185 is a Cross‑site Scripting (Stored XSS) vulnerability in BdThemes Element Pack Elementor Addons. Public details from the CVE entry indicate the issue affects Element Pack Elementor Addons up to version 5.5.3 (no n/a/vendorer product details beyond this provided). The Red Hat/Wordfen...

CVE-2024-30183

CVE-2024-30183 affects Livemesh Addons for WPBakery Page Builder. It is a Stored XSS caused by improper neutralization of input during web page generation, affecting versions up to 3.7. No explicit remediation details are provided in the connected documents; verify if a patch/version after 3.7 ex...

CVE-2024-30183 WordPress WPBakery Page Builder Addons by Livemesh plugin <= 3.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Livemesh Livemesh Addons for WPBakery Page Builder allows Stored XSS.This issue affects Livemesh Addons for WPBakery Page Builder: from n/a through 3.7...

CVE-2024-30182 WordPress HT Mega – Absolute Addons For Elementor plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects HT Mega: from n/a through = 2.4.3...