CVE-2023-32243-Detection-and-Mitigation-in-WordPress

🔐 CVE-2023-32243 – Обнаружение и смягчение последствий в WordPress 📘 Название проекта: Обнаружение и смягчение последствий CVE-2023-32243 в плагине Essential Addons for Elementor для WordPress 🧠 Аннотация Этот проект исследует эксплуатацию и предотвращение CVE-2023-32243 , критической уязвимости...

CVE-2023-32243

CVE-2023-32243 Essential Addons for Elementor - 権限なきアカウント乗っ取り PoCは公開されました。 これは教育/研究目的のみで作成されました！自己責任で使用してください！...

CVE-2023-47840

CVE-2023-47840 Qode Essential Addons = 1.5.2 - 인가 누락으로 인한 인증된구독자 이상 사용자의 임의 플러그인 설치/활성화 설명: WordPress용 Qode Essential Addons 플러그인은 1.5.2 이하의 모든 버전에서 installplugin 함수에 대한 capability check권한 검사 누락으로 인해 데이터의 무단 수정에 취약합니다. 이로 인해 구독자subscriber 수준 이상의 접근 권한을 가진 인증된 공격자가 임의의 플러그인을 설치하고 활성화할 수 있습니다...

essential-addons-for-elementor-xss-poc

🔍 Детектор XSS-уязвимости Essential Addons for Elementor 🚨 Важная информация Этот инструмент предназначен только для исследований безопасности и целей исправления. Не используйте его для вреда сайтам. Если вы находите уязвимые сайты, сообщите об этом ответственно владельцам сайтов, чтобы они могл...

WordPress Elementor Lite 5.7.1 - Arbitrary Password Reset

Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This issue affects Essential Addons for Elementor: from 5.4.0 through 5.7.1. id: CVE-2023-32243 info: name: WordPress Elementor Lite 5.7.1 - Arbitrary Password Reset author:...

CVE-2023-32243

CVE-2023-32243. Essential Addons for Elementor 5.4.0-5.7.1 - 인증되지 않은 권한 상승 정보 이 플러그인은 비밀번호 재설정 키를 검증하지 않아, 인증되지 않은 공격자가 관련 이메일이나 사용자 이름을 알고 있으면 임의 계정의 비밀번호를 원하는 대로 재설정하여 접근 권한을 획득할 수 있습니다. Python 설정 root@kitploit: pip install -r requirements.txt 익스플로잇 상세 정보...

cve-2026-7665

CVE-2026-7665 — Essential Addons for Elementor의 인증되지 않은 정보 노출...

CVE-2026-81777

Authentication Bypass by Spoofing vulnerability in WPDeveloper Essential Addons for Elementor allows Identity Spoofing. This issue affects Essential Addons for Elementor: from n/a through 6.8.0...

CVE-2026-81777 WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability

Authentication Bypass by Spoofing vulnerability in WPDeveloper Essential Addons for Elementor allows Identity Spoofing. This issue affects Essential Addons for Elementor: from n/a through 6.8.0...

EUVD-2026-67656

Authentication Bypass by Spoofing vulnerability in WPDeveloper Essential Addons for Elementor allows Identity Spoofing. This issue affects Essential Addons for Elementor: from n/a through 6.8.0...

CVE-2026-81777

Essential Addons for Elementor (WordPress plugin by WPDeveloper) versions up to and including 6.8.0 are affected by an Authentication Bypass by Spoofing vulnerability that enables Identity Spoofing . The issue was discovered by Gaurav popalghat and scored CVSS 5.3 (MEDIUM) , with a network attack...

WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability

Bypass vulnerability vulnerability discovered by Gaurav popalghat in WordPress Plugin Essential Addons for Elementor versions = 6.8.0...

CVE-2026-18039

The Essential Addons for Elementor WordPress plugin before 6.7.2 does not prevent user-supplied registration fields from overwriting reserved account attributes, allowing unauthenticated attackers to register an account with an arbitrary role, including administrator, on sites where a custom...

EUVD-2026-58598

The Essential Addons for Elementor WordPress plugin before 6.7.2 does not prevent user-supplied registration fields from overwriting reserved account attributes, allowing unauthenticated attackers to register an account with an arbitrary role, including administrator, on sites where a custom...

CVE-2026-18039

Affected product: Essential Addons for Elementor WordPress plugin. Vulnerability: mass assignment flaw in user registration fields allows unauthenticated attackers to create accounts with arbitrary roles (including administrator) when a specific custom profile field label is configured. Root caus...

CVE-2026-18039

The Essential Addons for Elementor WordPress plugin before 6.7.2 does not prevent user-supplied registration fields from overwriting reserved account attributes, allowing unauthenticated attackers to register an account with an arbitrary role, including administrator, on sites where a custom...

CVE-2026-18039 Essential Addons for Elementor < 6.7.2 - Unauthenticated Privilege Escalation via Custom Profile Field Mass Assignment

The Essential Addons for Elementor WordPress plugin before 6.7.2 does not prevent user-supplied registration fields from overwriting reserved account attributes, allowing unauthenticated attackers to register an account with an arbitrary role, including administrator, on sites where a custom...

CVE-2026-13345

The Essential Addons for Elementor WordPress plugin before 6.6.10 does not perform authorization, status, or visibility checks when resolving WooCommerce products in its product-comparison feature, allowing unauthenticated users to disclose the title, price, and SKU of draft, pending, and private...

CVE-2026-13344

The CVE concerns the Essential Addons for Elementor WordPress plugin: versions before 6.6.10 are vulnerable. The bug is in the Pricing Table widget title; the HTML tag name is not validated before output, enabling Stored XSS via the title for users with Contributor-level access and above. When an...

CVE-2026-13344

The Essential Addons for Elementor WordPress plugin before 6.6.10 does not validate the HTML tag name of the Pricing Table widget title before outputting it, allowing users with Contributor-level access and above to inject JavaScript that will be executed Stored Cross-Site Scripting when the page...