Lucene search
+L

661 matches found

GithubExploit
GithubExploit
added 2023/08/03 10:47 a.m.667 views

Exploit for Missing Authorization in Wpmet Metform_Elementor_Contact_Form_Builder

CVE-2022-1442 WordPress Plugin Metform = 2.1.3 - Improper...

7.5CVSS7.4AI score0.09877EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2023/07/24 12:0 a.m.24 views

WordPress The Royal Elementor Addons Plugin < 1.3.71 Information Disclosure Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:royal-elementor-addons:royalelementoraddons"; if description...

5.3CVSS8.8AI score0.00579EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2023/07/21 12:0 a.m.22 views

WordPress Essential Addons for Elementor Plugin < 5.8.2 Information Disclosure Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpdeveloper:essentialaddonsforelementor"; ifdescription...

5.3CVSS7AI score0.00588EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/20 6:15 a.m.27 views

CVE-2023-3779

The Essential Addons For Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 5.8.1 due to the plugin adding the API key to the source code of any page running the MailChimp block. This makes it possible for unauthenticated attackers...

5.3CVSS5.3AI score0.00588EPSS
SaveExploits0References2
OSV
OSV
added 2023/07/20 6:15 a.m.5 views

CVE-2023-3779

The Essential Addons For Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 5.8.1 due to the plugin adding the API key to the source code of any page running the MailChimp block. This makes it possible for unauthenticated attackers...

5.3CVSS7.3AI score0.00588EPSS
SaveExploits0References2
Prion
Prion
added 2023/07/20 6:15 a.m.76 views

Code injection

The Essential Addons For Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 5.8.1 due to the plugin adding the API key to the source code of any page running the MailChimp block. This makes it possible for unauthenticated attackers...

5CVSS5.7AI score0.00588EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/07/20 5:38 a.m.2514 views

CVE-2023-3779

The CVE-2023-3779 entry affects the WordPress plugin “Essential Addons for Elementor” (WPDeveloper) for WordPress, indicating that versions up to and including 5.8.1 disclose MailChimp API keys via source code added to pages using the MailChimp block. Root cause: unauthenticated disclosure of API...

5.3CVSS5.7AI score0.00588EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/20 5:38 a.m.10 views

CVE-2023-3779

The Essential Addons For Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 5.8.1 due to the plugin adding the API key to the source code of any page running the MailChimp block. This makes it possible for unauthenticated attackers...

5.3CVSS6.9AI score0.00588EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/07/20 5:38 a.m.34 views

CVE-2023-3779 Essential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure

The Essential Addons For Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 5.8.1 due to the plugin adding the API key to the source code of any page running the MailChimp block. This makes it possible for unauthenticated attackers...

5.3CVSS5.5AI score0.00588EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/07/20 12:0 a.m.7 views

WordPress plugin Essential Addons For Elementor 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An information disclosure vulnerability...

5.3CVSS6.7AI score0.00588EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
added 2023/07/20 12:0 a.m.60 views

Essential Addons For Elementor < 5.8.2 - Unauthenticated MailChimp API Key Disclosure

Description The plugin discloses the MailChimp API key in pages with the MailChimp block, allowing unauthenticated users to obtain such key...

5.3CVSS5.5AI score0.00588EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/20 12:0 a.m.9 views

PT-2023-26109 · WordPress · Essential Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Essential Addons For Elementor plugin for WordPress versions up to, and including, 5.8.1 Description: The issue allows unauthenticated attackers to obtain a site's MailChimp API key due to the plugin adding the API key to the source code ...

5.3CVSS6.2AI score0.00588EPSS
SaveExploits0References8
OSV
OSV
added 2023/07/18 3:15 a.m.4 views

CVE-2023-3709

The Royal Elementor Addons plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 1.3.70 due to the plugin adding the API key to the source code of any page running the MailChimp block. This makes it possible for unauthenticated attackers to...

5.3CVSS7.3AI score0.00579EPSS
SaveExploits0References2
NVD
NVD
added 2023/07/18 3:15 a.m.27 views

CVE-2023-3709

The Royal Elementor Addons plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 1.3.70 due to the plugin adding the API key to the source code of any page running the MailChimp block. This makes it possible for unauthenticated attackers to...

5.3CVSS0.00579EPSS
SaveExploits0References2
Prion
Prion
added 2023/07/18 3:15 a.m.19 views

Code injection

The Royal Elementor Addons plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 1.3.70 due to the plugin adding the API key to the source code of any page running the MailChimp block. This makes it possible for unauthenticated attackers to...

5CVSS6.9AI score0.00579EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/07/18 2:1 a.m.37 views

CVE-2023-3709 Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosure

The Royal Elementor Addons plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 1.3.70 due to the plugin adding the API key to the source code of any page running the MailChimp block. This makes it possible for unauthenticated attackers to...

5.3CVSS7.1AI score0.00579EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/07/18 2:1 a.m.13 views

CVE-2023-3709 Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosure

The Royal Elementor Addons plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 1.3.70 due to the plugin adding the API key to the source code of any page running the MailChimp block. This makes it possible for unauthenticated attackers to...

5.3CVSS6.7AI score0.00579EPSS
SaveExploits0References2
CVE
CVE
added 2023/07/18 2:1 a.m.2564 views

CVE-2023-3709

The CVE-2023-3709 vulnerability affects the WordPress plugin Royal Elementor Addons, with affected versions up to and including 1.3.70. The issue allows unauthenticated disclosure of a site’s MailChimp API key because the plugin writes the API key into the source code of pages that render the Mai...

5.3CVSS6.7AI score0.00579EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/18 12:0 a.m.2 views

PT-2023-25787 · Mailchimp +1 · Mailchimp +1

Name of the Vulnerable Software and Affected Versions: The Royal Elementor Addons plugin for WordPress versions up to, and including, 1.3.70 Description: The issue allows unauthenticated attackers to obtain a site's MailChimp API key due to the plugin adding the API key to the source code of any...

5.3CVSS6.2AI score0.00579EPSS
SaveExploits0References6
WPVulnDB
WPVulnDB
added 2023/07/18 12:0 a.m.20 views

Royal Elementor Addons < 1.3.71 - Unauthenticated API Key Disclosure

Description The plugin discloses the MailChimp API key in pages with the MailChimp block, allowing unauthenticated users to obtain such key...

5.3CVSS6.3AI score0.00579EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder