CVE-2024-2129

CVE-2024-2129: WPBITS Addons For Elementor Page Builder for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin’s heading widget in all versions up to and including 1.3.4.2, due to insufficient input sanitization and output escaping on user-supplied attributes. Attack scenario: ...

PT-2024-18851 · WordPress · Wpbits Addons For Elementor Page Builder

Name of the Vulnerable Software and Affected Versions: WPBITS Addons For Elementor Page Builder plugin for WordPress versions up to, and including, 1.3.4.2 Description: The issue is related to Stored Cross-Site Scripting via the plugin's heading widget due to insufficient input sanitization and...

WordPress Plugin WPBITS Addons For Elementor Page Builder Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

CVE-2024-29108

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Leevio Happy Addons for Elementor allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.10.1...

CVE-2024-29108

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Leevio Happy Addons for Elementor allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.10.1...

CVE-2024-29106

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Leap13 Premium Addons for Elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.10.16...

CVE-2024-29106

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Leap13 Premium Addons for Elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.10.16...

CVE-2024-29106 WordPress Premium Addons for Elementor plugin <= 4.10.16 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Leap13 Premium Addons for Elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.10.16...

CVE-2024-29106 WordPress Premium Addons for Elementor plugin <= 4.10.16 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Leap13 Premium Addons for Elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.10.16...

CVE-2024-29106

CVE-2024-29106 affects LeapWorx’s Leap13 Premium Addons for Elementor (WordPress Premium Addons for Elementor) up to version 4.10.16. The issue is an Improper Neutralization of Input During Web Page Generation, i.e., Stored XSS. Root cause: insufficient input sanitization in the affected plugin’s...

CVE-2024-29108

CVE-2024-29108 affects WordPress Happy Addons for Elementor (Leevio) via an improper neutralization of input during web page generation, enablingStored XSS. Affected: Happy Addons for Elementor versions 3.10.1 and earlier. Root cause: input handling vulnerable to script injection in page generati...

WordPress Plugin Premium Addons for Elementor Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress Qi Addons For Elementor Plugin <= 1.6.7 is vulnerable to Cross Site Scripting (XSS)

Software Qi Addons For Elementor Type Plugin Vulnerable versions = 1.6.7 Fixed in 1.6.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0826 Patch priority Low CVSS severity Low 6.5 Developer Qode Interactive PSID 2d3d74026644 Credits Webbernaut...

PT-2024-22726 · Unknown · Leap13 Premium Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Leap13 Premium Addons for Elementor versions 4.10.16 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an...

WordPress Plugin Happy Addons for Elementor Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2024-22728 · Leevio · Leevio Happy Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Leevio Happy Addons for Elementor versions 3.10.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can...

Qi Addons For Elementor < 1.6.8 - Contributor+ Stored XSS

Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin...

WordPress Elements kit Elementor addons Plugin <= 3.0.5 is vulnerable to Cross Site Scripting (XSS)

Software Elements kit Elementor addons Type Plugin Vulnerable versions = 3.0.5 Fixed in 3.0.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2042 Patch priority Low CVSS severity Low 6.5 Developer Wpmet PSID 562e8ef00866 Credits wesley wcraft Requir...

WordPress Elements kit Elementor addons Plugin <= 3.0.4 is vulnerable to Cross Site Scripting (XSS)

Software Elements kit Elementor addons Type Plugin Vulnerable versions = 3.0.4 Fixed in 3.0.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1239 Patch priority Low CVSS severity Low 6.5 Developer Wpmet PSID def03a5e89bb Credits RandomRoot Required...

ElementsKit Elementor addons < 3.0.4 - Contributor+ Stored XSS

Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin...