CVE-2024-43151 WordPress Ultimate Addons for Beaver Builder – Lite plugin <= 1.5.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder – Lite allows Stored XSS.This issue affects Ultimate Addons for Beaver Builder – Lite: from n/a through 1.5.9...

CVE-2024-37455

CVE-2024-37455 affects Ultimate Addons for Elementor. The issue is an Improper Privilege Management that enables privilege escalation in versions up to 1.36.31. Connected sources indicate the vulnerability existed and has been marked as patched; remediation is to upgrade to a patched version (exa...