CVE-2021-24256

The “Elementor – Header, Footer & Blocks Template” WordPress Plugin before 1.5.8 has two widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24255 Essential Addons for Elementor < 4.5.4 - Contributor+ Stored Cross-Site Scripting (XSS)

The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, both via a similar method...

PT-2021-15804

Name of the Vulnerable Software and Affected Versions Image Hover Effects – Elementor Addon versions prior to 1.3.4 Description The issue concerns a stored Cross-Site Scripting XSS vulnerability in a widget of the plugin. This vulnerability can be exploited by lower-privileged users, such as...

PT-2021-15797

Name of the Vulnerable Software and Affected Versions Premium Addons for Elementor versions prior to 4.2.8 Description The issue concerns stored Cross-Site Scripting XSS in several widgets of the plugin, which can be exploited by lower-privileged users such as contributors. The exploitation occur...

PT-2021-15809

Name of the Vulnerable Software and Affected Versions Sina Extension for Elementor versions prior to 3.3.12 Description The issue concerns stored Cross-Site Scripting XSS in several widgets of the plugin, which can be exploited by lower-privileged users such as contributors. The exploitation occu...

PT-2021-15800

Name of the Vulnerable Software and Affected Versions Livemesh Addons for Elementor versions prior to 6.8 Description The issue concerns stored Cross-Site Scripting XSS that can be exploited by lower-privileged users, such as contributors. The vulnerability is present in several widgets and can b...

PT-2021-15811

Name of the Vulnerable Software and Affected Versions Ultimate Addons for Elementor versions prior to 1.30.0 Description The issue concerns stored Cross-Site Scripting XSS that can be exploited by lower-privileged users, such as contributors, through several widgets in the plugin. This is achieve...

PT-2021-15796

Name of the Vulnerable Software and Affected Versions Elementor – Header, Footer & Blocks Template versions prior to 1.5.8 Description The issue concerns stored Cross-Site Scripting XSS in two widgets of the plugin, which can be exploited by lower-privileged users such as contributors. This is...

PT-2021-15807

Name of the Vulnerable Software and Affected Versions All-in-One Addons for Elementor – WidgetKit versions prior to 2.3.10 Description The issue allows lower-privileged users, such as contributors, to perform stored Cross-Site Scripting XSS attacks. This is possible due to several vulnerable...

PT-2021-15806

Name of the Vulnerable Software and Affected Versions The Plus Addons for Elementor Page Builder Lite version 2.0.5 and earlier Description The issue concerns stored Cross-Site Scripting XSS in four widgets of the plugin, which can be exploited by lower-privileged users such as contributors. The...

CVE-2021-24257: Improper Neutralization of Input During Web Page Generation

The “Premium Addons for Elementor” WordPress Plugin before 4.2.8 has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24273: Improper Neutralization of Input During Web Page Generation

The “Clever Addons for Elementor” WordPress Plugin before 2.1.0 has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24267: Improper Neutralization of Input During Web Page Generation

The “All-in-One Addons for Elementor – WidgetKit” WordPress Plugin before 2.3.10 has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24266: Improper Neutralization of Input During Web Page Generation

The “The Plus Addons for Elementor Page Builder Lite” WordPress Plugin before 2.0.6 has four widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24258: Improper Neutralization of Input During Web Page Generation

The Elements Kit Lite and Elements Kit Pro WordPress Plugins before 2.2.0 have a number of widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24268: Improper Neutralization of Input During Web Page Generation

The “JetWidgets For Elementor” WordPress Plugin before 1.0.9 has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24269: Improper Neutralization of Input During Web Page Generation

The “Sina Extension for Elementor” WordPress Plugin before 3.3.12 has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24263: Improper Neutralization of Input During Web Page Generation

The “Elementor Addons – PowerPack Addons for Elementor” WordPress Plugin before 2.3.2 for WordPress has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24264: Improper Neutralization of Input During Web Page Generation

The “Image Hover Effects – Elementor Addon” WordPress Plugin before 1.3.4 has a widget that is vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

PT-2021-15810

Name of the Vulnerable Software and Affected Versions DeTheme Kit for Elementor version 1.5.5.5 and earlier Description The issue concerns a stored Cross-Site Scripting XSS vulnerability in a widget of the DeTheme Kit for Elementor WordPress Plugin. This vulnerability can be exploited by...