Lucene search
+L

321 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/29 12:00 a.m.•3 views

CVE-2024-5086: Improper Neutralization of Input During Web Page Generation

The Essential Addons for Elementor PRO – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Team Member Carousel widget in all Pro versions up to, and including, 5.8.14 due to insufficient input...

6.4CVSS6AI score0.00263EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
•added 2024/05/28 12:00 a.m.•28 views

Essential Addons for Elementor PRO – Best Elementor Templates, Widgets, Kits & WooCommerce Builders < 5.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Carousel Widget

Description The Essential Addons for Elementor PRO – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Team Member Carousel widget in all Pro versions up to, and including, 5.8.14 due to insufficient...

6.4CVSS5.8AI score0.00263EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/05/17 9:15 a.m.•16 views

CVE-2023-47178

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in POSIMYTH Innovation The Plus Addons for Elementor Pro allows PHP Local File Inclusion.This issue affects The Plus Addons for Elementor Pro: from n/a through 5.2.8...

9.8CVSS5.8AI score0.00567EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/17 9:15 a.m.•38 views

CVE-2023-47178

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in POSIMYTH Innovation The Plus Addons for Elementor Pro allows PHP Local File Inclusion.This issue affects The Plus Addons for Elementor Pro: from n/a through 5.2.8...

9.8CVSS8.7AI score0.00567EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/17 8:35 a.m.•48 views

CVE-2023-47178 WordPress The Plus Addons for Elementor Pro plugin <= 5.2.8 - Unauthenticated Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in POSIMYTH Innovation The Plus Addons for Elementor Pro allows PHP Local File Inclusion.This issue affects The Plus Addons for Elementor Pro: from n/a through 5.2.8...

8.6CVSS8.7AI score0.00567EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/17 12:00 a.m.•38 views

WordPress plugin The Plus Addons for Elementor Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

9.8CVSS8.7AI score0.00567EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/17 12:00 a.m.•6 views

CVE-2023-47178: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in POSIMYTH Innovation The Plus Addons for Elementor Pro allows PHP Local File Inclusion.This issue affects The Plus Addons for Elementor Pro: from n/a through 5.2.8...

9.8CVSS8.2AI score0.00567EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/05/03 8:41 a.m.•20 views

WordPress Elementor Pro plugin <= 3.21.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ DOM-Based Stored Cross-Site Scripting vulnerability discovered by wesley wcraft in WordPress Plugin Elementor Pro versions = 3.21.0...

6.4CVSS5.7AI score0.00419EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
•added 2024/05/03 12:00 a.m.•31 views

WordPress Elementor Pro Plugin <= 3.21.0 is vulnerable to Cross Site Scripting (XSS)

Software Elementor Pro Type Plugin Vulnerable versions = 3.21.0 Fixed in 3.21.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4107 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5e068ca3d9a8 Credits wesley wcraft Required...

6.4CVSS5.8AI score0.00419EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2024/04/29 9:15 a.m.•33 views

CVE-2024-33635

Missing Authorization vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17...

7.5CVSS7.6AI score0.00561EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/29 8:23 a.m.•43 views

CVE-2024-33635 WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Unauthenticated Arbitrary Post/Page Deletion vulnerability

Missing Authorization vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17...

7.5CVSS7.7AI score0.00561EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/29 8:15 a.m.•29 views

CVE-2024-33634

Server-Side Request Forgery SSRF vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17...

5.4CVSS5.5AI score0.00287EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/29 6:15 a.m.•25 views

CVE-2024-33631

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Piotnet Piotnet Addons For Elementor Pro allows Stored XSS.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17...

9.8CVSS6.4AI score0.00438EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/29 5:58 a.m.•17 views

CVE-2024-33632 WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17...

5.4CVSS7AI score0.00209EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/29 5:58 a.m.•38 views

CVE-2024-33632 WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17...

5.4CVSS5.7AI score0.00209EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/29 5:58 a.m.•84 views

CVE-2024-33632

Technical details on CVE-2024-33632 (Piotnet Addons For Elementor Pro CSRF) are not present in the connected documents. Public info in the Initial Description is limited to the affected product/version; monitor for updates.

5.4CVSS5.1AI score0.00209EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/29 5:15 a.m.•31 views

CVE-2024-33633

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Piotnet Piotnet Addons For Elementor Pro allows Reflected XSS.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17...

7.1CVSS6.9AI score0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/29 5:07 a.m.•37 views

CVE-2024-33631 WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Authenticated Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Piotnet Piotnet Addons For Elementor Pro allows Stored XSS.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17...

6.5CVSS6.6AI score0.00438EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/29 5:07 a.m.•16 views

CVE-2024-33631 WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Authenticated Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Piotnet Piotnet Addons For Elementor Pro allows Stored XSS.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17...

6.5CVSS6.7AI score0.00438EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/29 5:07 a.m.•81 views

CVE-2024-33631

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Piotnet Piotnet Addons For Elementor Pro allows Stored XSS.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17...

9.8CVSS5.2AI score0.00438EPSS
SaveExploits0References1
Rows per page
Query Builder