WordPress All-in-One Addons for Elementor 跨站脚本漏洞

WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress All-in-One Addons for ElementorCWidgetKit Plugin versions prior to 2.3.10. An attacker can exploit this vulnerability to launch a cross-site scripting attack...

WordPress Clever Addons for Elementor 跨站脚本漏洞

WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress Clever Addons for Elementor Plugin versions prior to 2.10.0. An attacker can exploit this vulnerability to launch a cross-site scripting attack...

PT-2021-15797

Name of the Vulnerable Software and Affected Versions Premium Addons for Elementor versions prior to 4.2.8 Description The issue concerns stored Cross-Site Scripting XSS in several widgets of the plugin, which can be exploited by lower-privileged users such as contributors. The exploitation occur...

PT-2021-15811

Name of the Vulnerable Software and Affected Versions Ultimate Addons for Elementor versions prior to 1.30.0 Description The issue concerns stored Cross-Site Scripting XSS that can be exploited by lower-privileged users, such as contributors, through several widgets in the plugin. This is achieve...

PT-2021-15802

Name of the Vulnerable Software and Affected Versions WooLentor – WooCommerce Elementor Addons + Builder versions prior to 1.8.6 Description The issue concerns a stored Cross-Site Scripting XSS vulnerability in a widget of the plugin, which can be exploited by lower-privileged users, such as...

PT-2021-15800

Name of the Vulnerable Software and Affected Versions Livemesh Addons for Elementor versions prior to 6.8 Description The issue concerns stored Cross-Site Scripting XSS that can be exploited by lower-privileged users, such as contributors. The vulnerability is present in several widgets and can b...

PT-2021-15807

Name of the Vulnerable Software and Affected Versions All-in-One Addons for Elementor – WidgetKit versions prior to 2.3.10 Description The issue allows lower-privileged users, such as contributors, to perform stored Cross-Site Scripting XSS attacks. This is possible due to several vulnerable...

PT-2021-15813

Name of the Vulnerable Software and Affected Versions Clever Addons for Elementor versions prior to 2.1.0 Description The issue allows lower-privileged users, such as contributors, to perform stored Cross-Site Scripting XSS attacks. This is possible due to several vulnerable widgets in the plugin...

CVE-2021-24266: Improper Neutralization of Input During Web Page Generation

The “The Plus Addons for Elementor Page Builder Lite” WordPress Plugin before 2.0.6 has four widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24273: Improper Neutralization of Input During Web Page Generation

The “Clever Addons for Elementor” WordPress Plugin before 2.1.0 has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24271: Improper Neutralization of Input During Web Page Generation

The “Ultimate Addons for Elementor” WordPress Plugin before 1.30.0 has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24267: Improper Neutralization of Input During Web Page Generation

The “All-in-One Addons for Elementor – WidgetKit” WordPress Plugin before 2.3.10 has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24263: Improper Neutralization of Input During Web Page Generation

The “Elementor Addons – PowerPack Addons for Elementor” WordPress Plugin before 2.3.2 for WordPress has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24262: Improper Neutralization of Input During Web Page Generation

The “WooLentor – WooCommerce Elementor Addons + Builder” WordPress Plugin before 1.8.6 has a widget that is vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24257: Improper Neutralization of Input During Web Page Generation

The “Premium Addons for Elementor” WordPress Plugin before 4.2.8 has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24260: Improper Neutralization of Input During Web Page Generation

The “Livemesh Addons for Elementor” WordPress Plugin before 6.8 has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24255: Improper Neutralization of Input During Web Page Generation

The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, both via a similar method...

PT-2021-15795

Name of the Vulnerable Software and Affected Versions Essential Addons for Elementor Lite WordPress Plugin versions prior to 4.5.4 Description The issue concerns stored Cross-Site Scripting XSS that can be exploited by lower-privileged users, such as contributors, through two vulnerable widgets i...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.33 and fixes at least the following security issues: A race condition in Linux kernel SCTP sockets net/sctp/socket.c before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If...

Happy Addons for Elementor Free < 2.24.0 and Pro < 1.17.0 - Contributor+ Stored XSS

The plugins have a number of widgets that are vulnerable to stored Cross-Site ScriptingXSS by lower-privileged users such as contributors, all via a similar method: The “Card” widget accepts a “titletag” parameter. Although the element control lists a fixed set of possible html tags, it is possib...