Lucene search
+L

9365 matches found

CNNVD
CNNVD
•added 2024/04/09 12:00 a.m.•16 views

WordPress Plugin Beaver Builder Addons by WPZOOM 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress...

6.4CVSS7.7AI score0.00423EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/04/09 12:00 a.m.•17 views

WordPress Plugin Beaver Builder Addons by WPZOOM 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress...

6.4CVSS7.7AI score0.00423EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/04/09 12:00 a.m.•15 views

WordPress Plugin Beaver Builder Addons by WPZOOM 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress...

6.4CVSS7.7AI score0.00423EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/04/09 12:00 a.m.•15 views

WordPress Plugin Essential Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.4CVSS7.7AI score0.00353EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/04/09 12:00 a.m.•17 views

WordPress Plugin Happy Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.4CVSS8AI score0.0034EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/04/09 12:00 a.m.•20 views

Wordpress Plugin stax-addons-for-elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin.... A cross-site scripting...

6.4CVSS7.8AI score0.00353EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/09 12:00 a.m.•5 views

CVE-2024-1974: Improper Limitation of a Pathname to a Restricted Directory

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4.6 via the render function. This makes it possible for authenticated attackers, with contributor access or higher, to read the contents of arbitrary files...

8.8CVSS5.8AI score0.01214EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/09 12:00 a.m.•7 views

CVE-2024-2181: Improper Neutralization of Input During Web Page Generation

The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button widget in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS6AI score0.00423EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/09 12:00 a.m.•9 views

CVE-2024-2492: Improper Neutralization of Input During Web Page Generation

The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Twitter Tweet widget in all versions up to, and including, 2.7.18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS6AI score0.0036EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•19 views

PT-2024-19068 · Wpzoom · Beaver Builder Addons

Name of the Vulnerable Software and Affected Versions: Beaver Builder Addons by WPZOOM plugin for WordPress versions up to, and including, 1.3.4 Description: The issue is related to Stored Cross-Site Scripting via the Button widget due to insufficient input sanitization and output escaping. This...

6.4CVSS7.9AI score0.00423EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•20 views

PT-2024-15510 · WordPress · Premium Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Premium Addons for Elementor plugin for WordPress versions up to, and including, 4.10.16 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Wrapper Link Widget due to insufficient input sanitization and output...

6.4CVSS5.9AI score0.00746EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•14 views

PT-2024-22094 · WordPress · Happy Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Happy Addons for Elementor plugin for WordPress versions up to, and including, 3.10.4 Description: The issue is related to Stored Cross-Site Scripting via the Page Title HTML Tag due to insufficient input sanitization and output escaping ...

6.4CVSS7.8AI score0.00348EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•23 views

PT-2024-21408 · WordPress · Essential Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Essential Addons for Elementor plugin for WordPress versions up to, and including, 5.9.10 Description: The issue is related to Stored Cross-Site Scripting via the alignment parameter in the Woo Product Carousel widget. This is due to...

6.4CVSS8AI score0.00353EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•13 views

PT-2024-19103 · Wpzoom · Beaver Builder Addons

Name of the Vulnerable Software and Affected Versions: Beaver Builder Addons by WPZOOM plugin for WordPress versions up to, and including, 1.3.4 Description: The issue is related to Stored Cross-Site Scripting via the Testimonials widget due to insufficient input sanitization and output escaping...

6.4CVSS8AI score0.00423EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/09 12:00 a.m.•6 views

CVE-2024-1498: Improper Neutralization of Input During Web Page Generation

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Photo Stack Widget in all versions up to, and including, 3.10.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS6AI score0.00531EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•17 views

PT-2024-22104 · WordPress · Happy Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Happy Addons for Elementor plugin for WordPress versions up to, and including, 3.10.4 Description: The issue is related to Stored Cross-Site Scripting via the Post Title HTML Tag due to insufficient input sanitization and output escaping ...

6.4CVSS8AI score0.00358EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•20 views

PT-2024-15845 · WordPress · Qi Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Qi Addons For Elementor plugin for WordPress versions up to, and including, 1.6.7 Description: The issue is related to Stored Cross-Site Scripting via the plugin's widgets due to insufficient input sanitization and output escaping on...

6.4CVSS7.9AI score0.00602EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2024/04/09 12:00 a.m.•20 views

WordPress Plugin Beaver Builder Addons by WPZOOM 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress...

6.4CVSS7.7AI score0.00423EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/09 12:00 a.m.•3 views

CVE-2024-2788: Improper Neutralization of Input During Web Page Generation

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Title HTML Tag in all versions up to, and including, 3.10.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

6.4CVSS5.9AI score0.00358EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/04/09 12:00 a.m.•22 views

WordPress Plugin Essential Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.3CVSS8.1AI score0.00496EPSS
SaveExploits0References3
Rows per page
Query Builder