Lucene search
K

10 matches found

OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-30862 Malicious code in purejs-onepage-scroll (npm)

The package purejs-onepage-scroll was found to contain malicious code...

7.2AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in purejs-onepage-scroll (npm)

The package purejs-onepage-scroll was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2024/05/02 5:15 p.m.0 views

CVE-2024-3499

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.0 via the generatenavigationmarkup function of the Onepage Scroll module. This makes it possible for authenticated attackers, with contributor-level access and...

8.8CVSS6.3AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/05/02 4:52 p.m.12 views

CVE-2024-3499

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.0 via the generatenavigationmarkup function of the Onepage Scroll module. This makes it possible for authenticated attackers, with contributor-level access and...

8.8CVSS7.6AI score0.0166EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/05/02 4:52 p.m.14 views

CVE-2024-3499 ElementsKit Elementor addons <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Onepage Scroll Module

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.0 via the generatenavigationmarkup function of the Onepage Scroll module. This makes it possible for authenticated attackers, with contributor-level access and...

8.8CVSS9.1AI score0.0166EPSS
Exploits0References2
CVE
CVE
added 2024/05/02 4:52 p.m.47 views

CVE-2024-3499

The CVE-2024-3499 entry concerns ElementsKit Elementor addons and Templates Library for WordPress. Impact arises from a Local File Inclusion in the Onepage Scroll module’s generate_navigation_markup function, enabling an authenticated attacker with contributor+ privileges to include and execute a...

8.8CVSS7.6AI score0.0166EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2024/05/02 12:0 a.m.1 views

WordPress plugin ElementsKit Elementor addons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

8.8CVSS6.3AI score0.0166EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/05/02 12:0 a.m.2 views

PT-2024-26279 · WordPress · Elementskit Elementor Addons

Name of the Vulnerable Software and Affected Versions: ElementsKit Elementor addons plugin for WordPress versions prior to 3.1.1 Description: The issue allows authenticated attackers with contributor-level access and above to include and execute arbitrary files on the server via the generate...

8.8CVSS7.6AI score0.0166EPSS
Exploits0References6
Patchstack
Patchstack
added 2024/04/24 2:33 a.m.1 views

WordPress ElementsKit Elementor addons plugin <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Onepage Scroll Module vulnerability

Authenticated Contributor+ Local File Inclusion via Onepage Scroll Module vulnerability discovered by Webbernaut in WordPress Plugin Elements kit Elementor addons versions = 3.1.0...

8.8CVSS7AI score0.0166EPSS
Exploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2024/04/24 12:0 a.m.13 views

ElementsKit Elementor addons < 3.1.1 - Contributor+ Local File Inclusion via Onepage Scroll Module

Description The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.0 via the generatenavigationmarkup function of the Onepage Scroll module. This makes it possible for authenticated attackers, with contributor-level...

8.8CVSS7.9AI score0.0166EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder