Lucene search
+L

2392 matches found

CNVD
CNVD
added 2020/02/12 12:0 a.m.8 views

WordPress Elementor Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. elementor is a drag-and-drop page builder plugin used in it. A cross-site scripting vulnerability exists in the WordPress Elementor...

5.4CVSS6.3AI score0.01288EPSS
SaveExploits2References1
NVD
NVD
added 2020/01/28 11:15 p.m.34 views

CVE-2020-8426

The Elementor plugin before 2.8.5 for WordPress suffers from a reflected XSS vulnerability on the elementor-system-info page. These can be exploited by targeting an authenticated user...

5.4CVSS5.3AI score0.01288EPSS
SaveExploits2References3
OSV
OSV
added 2020/01/28 11:15 p.m.6 views

CVE-2020-8426

The Elementor plugin before 2.8.5 for WordPress suffers from a reflected XSS vulnerability on the elementor-system-info page. These can be exploited by targeting an authenticated user...

5.4CVSS6.1AI score0.01288EPSS
SaveExploits2References3
Prion
Prion
added 2020/01/28 11:15 p.m.20 views

Cross site scripting

The Elementor plugin before 2.8.5 for WordPress suffers from a reflected XSS vulnerability on the elementor-system-info page. These can be exploited by targeting an authenticated user...

3.5CVSS5.2AI score0.01288EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
added 2020/01/28 10:26 p.m.38 views

CVE-2020-8426

The Elementor plugin before 2.8.5 for WordPress suffers from a reflected XSS vulnerability on the elementor-system-info page. These can be exploited by targeting an authenticated user...

5.2AI score0.01288EPSS
SaveExploits2References3
CVE
CVE
added 2020/01/28 10:26 p.m.144 views

CVE-2020-8426

CVE-2020-8426 describes a reflected XSS in the WordPress Elementor Page Builder plugin (versions prior to 2.8.5) on the elementor-system-info page. The vulnerability is exploitable by an authenticated user; no public exploit details are provided in the supplied documents. Affected component is th...

5.4CVSS5.2AI score0.01288EPSS
SaveExploits2References3Affected Software1
OSV
OSV
added 2019/09/10 11:15 a.m.5 views

CVE-2017-18596

The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions...

8.8CVSS5.8AI score0.01381EPSS
SaveExploits0References2
NVD
NVD
added 2019/09/10 11:15 a.m.18 views

CVE-2017-18596

The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions...

8.8CVSS8.8AI score0.01381EPSS
SaveExploits0References2
Prion
Prion
added 2019/09/10 11:15 a.m.20 views

Design/Logic Flaw

The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions...

6.5CVSS8.7AI score0.01381EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/09/10 10:55 a.m.38 views

CVE-2017-18596

The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions...

8.8AI score0.01381EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/09/02 12:0 a.m.4 views

WordPress sina-extension-for-elementor plugin path traversal vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. sina-extension-for-elementor is a webpage builder plugin used in it. A path traversal vulnerability exists in versions of the WordPres...

7.5CVSS6.7AI score0.02386EPSS
SaveExploits0References1
OSV
OSV
added 2019/08/30 5:15 p.m.4 views

CVE-2019-15839

The sina-extension-for-elementor plugin before 2.2.1 for WordPress has local file inclusion...

7.5CVSS5.8AI score0.02386EPSS
SaveExploits0References3
Rows per page
Query Builder