WordPress Charity Addon for Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Charity Addon for Elementor versions = 1.3.0...

WordPress Medical Addon for Elementor plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Medical Addon for Elementor versions = 1.6.4...

WordPress Primary Addon for Elementor Plugin <= 1.5.7 is vulnerable to Cross Site Scripting (XSS)

Software Primary Addon for Elementor Type Plugin Vulnerable versions = 1.5.7 Fixed in 1.5.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-44033 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8b7b50340583 Credits João Pedro S Alcântara...

PT-2024-39067 · WordPress · Themesflat Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Themesflat Addons For Elementor plugin for WordPress versions up to, and including, 2.2.1 Description: The issue is related to Stored Cross-Site Scripting XSS due to insufficient input sanitization and output escaping on URL attributes in...

WordPress OneElements – Best Elementor Addons Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS)

Software OneElements – Best Elementor Addons Type Plugin Vulnerable versions = 1.3.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9068 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 63c1feeb982b Credits...

WordPress Charity Addon for Elementor Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software Charity Addon for Elementor Type Plugin Vulnerable versions = 1.3.0 Fixed in 1.3.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-44026 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8bb1c1474af8 Credits João Pedro S Alcântara...

WordPress Medical Addon for Elementor Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)

Software Medical Addon for Elementor Type Plugin Vulnerable versions = 1.6.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-44024 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2feb17bc52f9 Credits João Pedro S Alcântara Kinor...

WordPress Gum Elementor Addon Plugin <= 1.3.6 is vulnerable to Cross Site Scripting (XSS)

Software Gum Elementor Addon Type Plugin Vulnerable versions = 1.3.6 Fixed in 1.3.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-44027 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID deeeb1b651c5 Credits João Pedro S Alcântara Kinorth...

WordPress Restaurant & Cafe Addon for Elementor Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS)

Software Restaurant & Cafe Addon for Elementor Type Plugin Vulnerable versions = 1.5.5 Fixed in 1.5.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-44032 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID fe8ab7d9930f Credits João Pedro S...

WordPress Gum Elementor Addon plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by ghsinfosec Patchstack Alliance in WordPress Plugin Gum Elementor Addon versions = 1.3.7...

WordPress Gum Elementor Addon Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS)

Software Gum Elementor Addon Type Plugin Vulnerable versions = 1.3.7 Fixed in 1.3.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-44035 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 73298ffb7a63 Credits ghsinfosec Required privilege...

CVE-2024-44001

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons.This issue affects Royal Elementor Addons: from n/a through = 1.3.982...

CVE-2024-44001

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WP Royal Royal Elementor Addons allows Stored XSS.This issue affects Royal Elementor Addons: from n/a through 1.3.982...

CVE-2024-44007

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in SKT Themes SKT Templates – Elementor & Gutenberg templates allows Reflected XSS.This issue affects SKT Templates – Elementor & Gutenberg templates: from n/a through 6.14...

CVE-2024-43977

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder allows Stored XSS.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a...

CVE-2024-43977

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite allows Stored XSS.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through 5.6.2...

CVE-2024-44001 WordPress Royal Elementor Addons and Templates plugin <= 1.3.982 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons.This issue affects Royal Elementor Addons: from n/a through = 1.3.982...

CVE-2024-44001 WordPress Royal Elementor Addons and Templates plugin <= 1.3.982 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons.This issue affects Royal Elementor Addons: from n/a through = 1.3.982...

CVE-2024-44001

CVE-2024-44001 affects WordPress plugin Royal Elementor Addons and Templates (authenticated stored XSS). The issue stems from improper neutralization of input during web page generation, allowing stored XSS in Royal Elementor Addons versions up to and including 1.3.982. Public-enabling code paths...

CVE-2024-44007

CVE-2024-44007 is a reflected Cross-Site Scripting (XSS) vulnerability affecting the WordPress plugin “SKT Templates – Elementor & Gutenberg templates” (SKT Templates) up to version 6.14. The issue arises from improper input neutralization during web page generation, enabling reflected XSS. Publi...