Lucene search
+L

12771 matches found

GithubExploit
GithubExploit
added 2025/12/27 1:27 p.m.295 views

Exploit for Unrestricted Upload of File with Dangerous Type in Royal-Elementor-Addons Royal_Elementor_Addons

Royal Elementor Addons ≤ 1.3.78 – Unauthenticated Arbitrary Fi...

9.8CVSS7.4AI score0.81695EPSS
SaveExploits18
RedhatCVE
RedhatCVE
added 2025/12/25 1:23 p.m.8 views

CVE-2025-68500

Server-Side Request Forgery SSRF vulnerability in bdthemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Server Side Request Forgery.This issue affects Prime Slider – Addons For Elementor: from n/a through = 4.0.10...

4.9CVSS7AI score0.00171EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/25 1:23 p.m.9 views

CVE-2025-68532

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in modeltheme ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery allows Stored XSS.This issue affects ModelTheme Addons for WPBakery and Elementor: from n/a through 1.5.6...

6.5CVSS6AI score0.00165EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/25 1:23 p.m.9 views

CVE-2025-68494

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Premium Addons for Elementor: from n/a through = 4.11.53...

5.3CVSS6.9AI score0.00346EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/12/25 12:00 a.m.7 views

WordPress Plugin Ultimate Member Widgets for Elementor Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin Ultimate Member Widgets...

7.5CVSS5.9AI score0.00276EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/24 3:30 p.m.11 views

EUVD-2025-205191

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in modeltheme ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery allows Stored XSS.This issue affects ModelTheme Addons for WPBakery and Elementor: from n/a through 1.5.6...

5.4CVSS5.5AI score0.00165EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/24 3:30 p.m.8 views

EUVD-2025-205209

Server-Side Request Forgery SSRF vulnerability in bdthemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Server Side Request Forgery.This issue affects Prime Slider – Addons For Elementor: from n/a through = 4.0.10...

9.1CVSS6.5AI score0.00171EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/24 3:30 p.m.8 views

EUVD-2025-205212

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Premium Addons for Elementor: from n/a through = 4.11.53...

7.5CVSS6.3AI score0.00346EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/24 1:16 p.m.14 views

CVE-2025-68532

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in modeltheme ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery allows Stored XSS.This issue affects ModelTheme Addons for WPBakery and Elementor: from n/a through 1.5.6...

6.5CVSS0.00165EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/24 1:16 p.m.10 views

CVE-2025-68500

Server-Side Request Forgery SSRF vulnerability in bdthemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Server Side Request Forgery.This issue affects Prime Slider – Addons For Elementor: from n/a through = 4.0.10...

4.9CVSS0.00171EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/24 1:16 p.m.7 views

CVE-2025-68494

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Premium Addons for Elementor: from n/a through = 4.11.53...

7.5CVSS5.8AI score0.00346EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/24 1:16 p.m.9 views

CVE-2025-68494

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Premium Addons for Elementor: from n/a through = 4.11.53...

5.3CVSS0.00346EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/24 1:16 p.m.8 views

CVE-2023-40679

Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Master Addons for Elementor: from n/a through 2.0.5.3...

6.5CVSS0.00287EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/24 12:51 p.m.8 views

EUVD-2023-45235

Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Master Addons for Elementor: from n/a through 2.0.5.3...

6.5CVSS6.5AI score0.00287EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/24 12:51 p.m.3 views

CVE-2023-40679 WordPress Master Elementor Addons plugin <= 2.0.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Master Addons for Elementor: from n/a through 2.0.5.3...

6.5CVSS6.6AI score0.00287EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/24 12:51 p.m.33 views

CVE-2023-40679 WordPress Master Elementor Addons plugin <= 2.0.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Master Addons for Elementor: from n/a through 2.0.5.3...

6.5CVSS0.00287EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/24 12:51 p.m.29 views

CVE-2023-40679

CVE-2023-40679 is a broken access control vulnerability in the WordPress plugin Master Addons for Elementor (aka Jewel Theme Master Addons for Elementor). Affected versions are up to and including 2.0.5.3, with unauthenticated access possible due to misconfigured access controls. The issue is con...

6.5CVSS7.4AI score0.00287EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/24 12:32 p.m.9 views

CVE-2024-24844

Missing Authorization vulnerability in IdeaBox Creations PowerPack Pro for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PowerPack Pro for Elementor: from n/a through 2.10.6...

7.5CVSS7AI score0.0028EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/24 12:31 p.m.38 views

CVE-2025-68532 WordPress ModelTheme Addons for WPBakery and Elementor plugin < 1.5.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in modeltheme ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery allows Stored XSS.This issue affects ModelTheme Addons for WPBakery and Elementor: from n/a through 1.5.6...

6.5CVSS0.00165EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/24 12:31 p.m.27 views

CVE-2025-68532

CVE-2025-68532 relates to a Stored Cross-Site Scripting vulnerability in ModelTheme Addons for WPBakery and Elementor (modeltheme-addons-for-wpbakery). The issue arises from improper input neutralization during web page generation, allowing stored script execution via the affected plugin. Affecte...

6.5CVSS5.6AI score0.00165EPSS
SaveExploits0References1
Rows per page
Query Builder