WordPress Extra Privacy for Elementor plugin <= 0.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Extra Privacy for Elementor versions = 0.1.3...

WordPress myCred Elementor Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)

Software myCred Elementor Type Plugin Vulnerable versions = 1.2.6 Fixed in 1.2.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49702 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 91faf3362d6d Credits João Pedro S Alcântara Kinorth Requir...

WordPress News Kit Elementor Addons Plugin <= 1.2.1 is vulnerable to Sensitive Data Exposure

Software News Kit Elementor Addons Type Plugin Vulnerable versions = 1.2.1 Fixed in 1.2.2 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-9541 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1aff69c2a359 Credits Nishiv Required...

WordPress Web Bricks Addons for Elementor Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Web Bricks Addons for Elementor Type Plugin Vulnerable versions = 1.1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49665 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3f32b8aa058a Credits Gab Required privilege...

WordPress Extra Privacy for Elementor Plugin <= 0.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Extra Privacy for Elementor Type Plugin Vulnerable versions = 0.1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49654 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7a3a2af9d08c Credits Mika Required privileg...

WordPress WPKoi Templates for Elementor Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)

Software WPKoi Templates for Elementor Type Plugin Vulnerable versions = 3.1.0 Fixed in 3.1.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-49679 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 90b6d1565959 Credits ghsinfose...

WordPress Local Business Addons For Elementor Plugin <= 1.1.5 is vulnerable to Cross Site Scripting (XSS)

Software Local Business Addons For Elementor Type Plugin Vulnerable versions = 1.1.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49667 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5f2f058a1589 Credits Gab Required privile...

WordPress Custom Icons for Elementor Plugin <= 0.3.3 is vulnerable to Arbitrary File Upload

Software Custom Icons for Elementor Type Plugin Vulnerable versions = 0.3.3 Fixed in 0.3.4 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-49676 Patch priority Low CVSS severity Low 6.6 Developer Claim ownership PSID f3c8312f66dc Credits tahu.datar Required privilege...

CVE-2024-49631

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Md Abdul Kader Easy Addons for Elementor allows Stored XSS.This issue affects Easy Addons for Elementor: from n/a through 1.3.0...

CVE-2024-49631

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Md Abdul Kader Easy Addons for Elementor easy-addons-for-elementor allows Stored XSS.This issue affects Easy Addons for Elementor: from n/a through = 1.5.0...

CVE-2024-49630 WordPress WP Education for Elementor plugin <= 1.2.8 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in HT Plugins WP Education allows Stored XSS.This issue affects WP Education: from n/a through 1.2.8...

CVE-2024-49630 WordPress WP Education for Elementor plugin <= 1.2.8 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DevItems WP Education wp-education allows Stored XSS.This issue affects WP Education: from n/a through = 1.2.8...

CVE-2024-49631 WordPress Easy Addons for Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Md Abdul Kader Easy Addons for Elementor easy-addons-for-elementor allows Stored XSS.This issue affects Easy Addons for Elementor: from n/a through = 1.5.0...

CVE-2024-49631

CVE-2024-49631 is a stored XSS in the WordPress plugin Easy Addons for Elementor (vulnerable:

CVE-2024-49631 WordPress Easy Addons for Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Md Abdul Kader Easy Addons for Elementor easy-addons-for-elementor allows Stored XSS.This issue affects Easy Addons for Elementor: from n/a through = 1.5.0...

WordPress plugin Easy Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-33586 · Elementor · Easy Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Easy Addons for Elementor versions 1.3.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in the Easy Addons for...

CVE-2024-9889

The ElementInvader Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.9 via the Page Loader widget. This makes it possible for authenticated attackers, with contributor-level access and above, to view...

WordPress plugin ElementInvader Addons for Elementor 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

WordPress ElementInvader Addons for Elementor plugin <= 1.2.9 - Authenticated (Contributor+) Information Exposure vulnerability

Authenticated Contributor+ Information Exposure vulnerability discovered by Ankit Patel in WordPress Plugin ElementInvader Addons for Elementor versions = 1.2.9...