CVE-2024-13855

The Prime Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.1 via the paeglobalblock shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

PT-2025-7398

Name of the Vulnerable Software and Affected Versions Prime Addons for Elementor plugin for WordPress versions up to, and including, 2.0.1 Description The issue concerns an Insecure Direct Object Reference vulnerability. This vulnerability is due to missing validation on a user-controlled key in...