2 matches found
CVE-2026-32430: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Stored XSS.This issue affects PowerPack Addons for Elementor: from n/a through = 2.9.9...
6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
CVE-2023-6984: Cross-Site Request Forgery (CSRF)
The PowerPack Addons for Elementor Free Widgets, Extensions and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.13. This is due to missing or incorrect nonce validation in the...
5.3CVSS5.3AI score0.00196EPSS
SaveExploits0References4
20