EUVD-2024-27742

Malicious code in bioql PyPI...

CVE-2024-8482

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 1.3.982 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-2798

CVE-2024-2798 – Royal Elementor Addons and Templates (WordPress) : A DOM-based stored cross-site scripting vulnerability affects all versions up to 1.3.971 in the plugin, caused by insufficient input sanitization and output escaping on widget container attributes. Exploitation requires authentica...

CVE-2024-0514

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.87. This is due to missing or incorrect nonce validation on the addtocompare function. This makes it possible for unauthenticated attackers to add...