Lucene search
+L

12926 matches found

CNNVD
CNNVD
added 2024/06/06 12:00 a.m.11 views

WordPress plugin Themesflat Addons For Elementor Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.4CVSS6.8AI score0.00333EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/06/06 12:00 a.m.10 views

WordPress plugin Cowidgets - Elementor Addons Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

8.8CVSS7.2AI score0.00932EPSS
SaveExploits0References8
Patchstack
Patchstack
added 2024/06/06 12:00 a.m.16 views

WordPress Master Addons for Elementor Plugin <= 2.0.5.9 is vulnerable to Cross Site Scripting (XSS)

Software Master Addons for Elementor Type Plugin Vulnerable versions = 2.0.5.9 Fixed in 2.0.6.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35688 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d87e60142c2c Credits Khalid Yusuf Required...

6.5CVSS6.7AI score0.0026EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/06/06 12:00 a.m.14 views

WordPress plugin Magical Addons For Elementor Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.4CVSS6.8AI score0.00314EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2024/06/06 12:00 a.m.27 views

WordPress Qi Addons For Elementor Plugin <= 1.7.2 is vulnerable to Cross Site Scripting (XSS)

Software Qi Addons For Elementor Type Plugin Vulnerable versions = 1.7.2 Fixed in 1.7.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4364 Patch priority Low CVSS severity Low 6.5 Developer Qode Interactive PSID 0676734b6c2d Credits wesley wcraft...

6.4CVSS5.8AI score0.00329EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/06/06 12:00 a.m.20 views

WordPress Clever Addons for Elementor Plugin <= 2.1.9 is vulnerable to Cross Site Scripting (XSS)

Software Clever Addons for Elementor Type Plugin Vulnerable versions = 2.1.9 Fixed in 2.2.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2350 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f64ce9c41857 Credits Francesco...

6.4CVSS5.8AI score0.00329EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/06/06 12:00 a.m.13 views

WordPress plugin Themesflat Addons For Elementor Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.4CVSS6.8AI score0.00425EPSS
SaveExploits0References10
OSV
OSV
added 2024/06/05 5:15 p.m.14 views

CVE-2024-35674

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates.This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through 1.5.109...

8.8CVSS5.8AI score0.00367EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/05 5:15 p.m.39 views

CVE-2024-35674

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor.This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through = 1.5.109...

8.8CVSS4.7AI score0.00367EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/06/05 4:19 p.m.24 views

CVE-2024-35674 WordPress Unlimited Elements For Elementor plugin <= 1.5.109 - Broken Access Control vulnerability

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor.This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through = 1.5.109...

4.3CVSS5.9AI score0.00367EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/05 4:19 p.m.52 views

CVE-2024-35674 WordPress Unlimited Elements For Elementor plugin <= 1.5.109 - Broken Access Control vulnerability

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor.This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through = 1.5.109...

4.3CVSS4.7AI score0.00367EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/05 4:19 p.m.66 views

CVE-2024-35674

CVE-2024-35674 – Missing Authorization in Unlimited Elements for Elementor (Free Widgets, Addons, Templates) affects Unlimited Elements For Elementor up to version 1.5.109. Public exploitation details are not provided in the supplied documents; no remediation details are specified here.

8.8CVSS5.9AI score0.00367EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/06/05 4:15 p.m.9 views

WordPress Unlimited Elements For Elementor plugin <= 1.5.109 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Khalid Patchstack Alliance in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 1.5.109...

8.8CVSS7AI score0.00367EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/06/05 1:08 p.m.9 views

WordPress Boostify Header Footer Builder for Elementor plugin <= 1.3.5 - Missing Authorization to Page/Post Creation vulnerability

Missing Authorization to Page/Post Creation vulnerability discovered by Lucio Sá in WordPress Plugin Boostify Header Footer Builder for Elementor versions = 1.3.5...

4.3CVSS7AI score0.00343EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/06/05 8:15 a.m.15 views

CVE-2024-5006

The Boostify Header Footer Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘size’ parameter in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

5.4CVSS5.9AI score0.00321EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/06/05 7:34 a.m.21 views

CVE-2024-5006 Boostify Header Footer Builder for Elementor <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via size Parameter

The Boostify Header Footer Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘size’ parameter in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

6.4CVSS5.8AI score0.00321EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/06/05 7:34 a.m.34 views

CVE-2024-5006 Boostify Header Footer Builder for Elementor <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via size Parameter

The Boostify Header Footer Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘size’ parameter in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

6.4CVSS5.7AI score0.00321EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2024/06/05 3:02 a.m.10 views

WordPress Boostify Header Footer Builder for Elementor plugin <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via size Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via size Parameter vulnerability discovered by stealthcopter in WordPress Plugin Boostify Header Footer Builder for Elementor versions = 1.3.2...

6.4CVSS5.8AI score0.00321EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2024/06/05 12:00 a.m.26 views

WordPress Happy Addons for Elementor plugin cross-site scripting vulnerability (CNVD-2024-26468)

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS6.2AI score0.00322EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/06/05 12:00 a.m.24 views

PT-2024-26621 · WordPress · Unlimited Elements For Elementor

Name of the Vulnerable Software and Affected Versions: Unlimited Elements For Elementor Free Widgets, Addons, Templates versions 1.5.109 and earlier Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects the Unlimited Elements For Elementor plugin,...

8.8CVSS6.5AI score0.00367EPSS
SaveExploits0References4
Rows per page
Query Builder