WordPress Pro Addons For Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin Pro Addons For Elementor versions = 1.5.0...

CVE-2024-10325

The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.6.45 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-10325

The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.6.45 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-10325 Elementor Header & Footer Builder <= 1.6.45 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.6.45 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-10325 Elementor Header & Footer Builder <= 1.6.45 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.6.45 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-10325

CVE-2024-10325 affects Elementor Header & Footer Builder (Ultimate Addons for Elementor) for WordPress. Desktop/REST SVG File Uploads allow Stored XSS due to insufficient input sanitization and output escaping in SVG handling. Affected versions: up to 1.6.45. Exploitation requires authentication ...

WordPress Elementor Header & Footer Builder plugin <= 1.6.45 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin Ultimate Addons for Elementor - Lite versions = 1.6.45...

WordPress Web Stories Widgets For Elementor Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Software Web Stories Widgets For Elementor Type Plugin Vulnerable versions = 1.1 Fixed in 1.1.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52354 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3d854e2af032 Credits theviper17 Required...

WordPress Moose Elementor Kit Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Moose Elementor Kit Type Plugin Vulnerable versions = 1.0.0 Fixed in 1.1.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51856 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7337aec84077 Credits Gab Required privilege Contributor...

WordPress The Pack Elementor addons Plugin <= 2.1.0 is vulnerable to Cross Site Scripting (XSS)

Software The Pack Elementor addons Type Plugin Vulnerable versions = 2.1.0 Fixed in 2.1.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52356 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3e3bdbff1a41 Credits João Pedro S Alcântara Kinor...

WordPress Dynamic Post Grid Elementor Addon Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)

Software Dynamic Post Grid Elementor Addon Type Plugin Vulnerable versions = 1.0.6 Fixed in 1.0.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51852 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5db0fa01f3bb Credits Gab Required privile...

WordPress Topbar ID for Elementor Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Topbar ID for Elementor Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51894 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1c12d2eed8fd Credits Gab Required privilege Contribut...

WordPress Elementor – Header, Footer & Blocks Template Plugin <= 1.6.45 is vulnerable to Cross Site Scripting (XSS)

Software Elementor – Header, Footer & Blocks Template Type Plugin Vulnerable versions = 1.6.45 Fixed in 1.6.46 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10325 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 3bcf490aa26b...

WordPress File Select Control For Elementor Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software File Select Control For Elementor Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51841 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID aa95e9a9fba3 Credits Gab Required privilege...

PT-2024-16469 · Unknown +1 · Skt Addons For Elementor +1

Name of the Vulnerable Software and Affected Versions: SKT Addons for Elementor versions up to, and including, 3.3 Description: The issue allows authenticated attackers with Contributor-level access and above to extract data from private or draft posts created by Elementor that they should not ha...

WordPress Postify: Post Layout For Elementor Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Postify: Post Layout For Elementor Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51893 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9a15834c2f21 Credits Gab Required privileg...

WordPress Rig Elements For Elementor Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Rig Elements For Elementor Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51927 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f072fe8b576c Credits Gab Required privilege...

WordPress Cowidgets – Elementor Addons Plugin <= 1.2.0 is vulnerable to Sensitive Data Exposure

Software Cowidgets – Elementor Addons Type Plugin Vulnerable versions = 1.2.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-10779 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 63dcd201564a Credits Francesco Carluc...

WordPress Cowidgets – Elementor Addons Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)

Software Cowidgets – Elementor Addons Type Plugin Vulnerable versions = 1.2.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8960 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID ef9c57e0f569 Credits Francesco...

WordPress Responsive Addons for Elementor Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)

Software Responsive Addons for Elementor Type Plugin Vulnerable versions = 1.5.4 Fixed in 1.6.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52358 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5e0984c9c585 Credits Khalid Yusuf Required...