Lucene search
+L

2 matches found

CNNVD
CNNVD
•added 2024/03/30 12:00 a.m.•19 views

WordPress Plugin Essential Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS8.2AI score0.00769EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/30 12:00 a.m.•3 views

CVE-2024-3018: Deserialization of Untrusted Data

The Essential Addons for Elementor plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.9.13 via deserialization of untrusted input from the 'errorresetpassword' attribute of the "Login | Register Form" widget disabled by default. This makes it possib...

8.8CVSS6.1AI score0.00769EPSS
SaveExploits0References3
Rows per page
Query Builder