Lucene search
+L

965 matches found

NVD
NVD
added 2024/10/28 12:15 p.m.19 views

CVE-2024-50442

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through = 1.3.980...

7.2CVSS0.00554EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/28 12:15 p.m.5 views

CVE-2024-50442

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through 1.3.980...

7.2CVSS5.8AI score0.00554EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/28 11:14 a.m.69 views

CVE-2024-50442

CVE-2024-50442 is an XML External Entity (XXE) vulnerability in WordPress plugin Royal Elementor Addons and Templates (

7.2CVSS5.9AI score0.00554EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/10/28 11:14 a.m.33 views

CVE-2024-50442 WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through = 1.3.980...

6.5CVSS0.00554EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/28 11:14 a.m.24 views

CVE-2024-50442 WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through = 1.3.980...

6.5CVSS5.9AI score0.00554EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/28 12:00 a.m.20 views

WordPress plugin Royal Elementor Addons 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

7.2CVSS7AI score0.00554EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/10/24 9:39 a.m.10 views

WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability

XML External Entity XXE vulnerability discovered by wcraft Patchstack Alliance in WordPress Plugin Royal Elementor Addons versions = 1.3.980...

7.2CVSS7.1AI score0.00554EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/10/24 12:00 a.m.16 views

WordPress Royal Elementor Addons Plugin <= 1.3.980 is vulnerable to XML External Entity (XXE)

Software Royal Elementor Addons Type Plugin Vulnerable versions = 1.3.980 Fixed in 1.3.981 OWASP Top 10 A3: Injection Classification XML External Entity XXE CVE CVE-2024-50442 Patch priority Low CVSS severity Low 6.5 Developer WProyal PSID d8b2b553fe8e Credits wcraft Required privilege Author...

7.2CVSS6.8AI score0.00554EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/10/17 4:15 a.m.12 views

CVE-2024-7417

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.3.986 via the datafetch. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract data from password protected...

4.3CVSS5.8AI score0.00414EPSS
SaveExploits0References3
NVD
NVD
added 2024/10/17 4:15 a.m.30 views

CVE-2024-7417

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.3.986 via the datafetch. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract data from password protected...

4.3CVSS0.00414EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/10/17 12:00 a.m.9 views

WordPress plugin Royal Elementor Addons and Templates 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

4.3CVSS6.1AI score0.00414EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2024/10/16 3:07 p.m.9 views

WordPress Royal Elementor Addons and Templates plugin <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosure vulnerability

Authenticated Subscriber+ Private Post Disclosure vulnerability discovered by stealthcopter in WordPress Plugin Royal Elementor Addons versions = 1.3.986...

4.3CVSS7AI score0.00414EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/10/16 12:00 a.m.18 views

WordPress Royal Elementor Addons Plugin <= 1.3.986 is vulnerable to Sensitive Data Exposure

Software Royal Elementor Addons Type Plugin Vulnerable versions = 1.3.986 Fixed in 1.3.987 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-7417 Patch priority Low CVSS severity Low 4.3 Developer WProyal PSID 4060f71c187f Credits stealthcopter Required...

4.3CVSS6.5AI score0.00414EPSS
SaveExploits0References3Affected Software1
Qualys Blog
Qualys Blog
added 2024/10/15 5:42 p.m.16 views

The Spanish National Security Framework (ENS) is Now Part of the Qualys Enterprise TruRisk™ Platform

The Spanish National Security Framework ENS, regulated by Royal Decree 311/2022 , is a mandatory framework designed to ensure an optimal level of security for the digital infrastructure of companies in the Spanish public sector and critical infrastructures. Its main objective is to establish a...

7AI score
SaveExploits0
OSV
OSV
added 2024/10/08 12:15 p.m.8 views

CVE-2024-8482

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 1.3.982 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS5.9AI score0.00443EPSS
SaveExploits0References3
NVD
NVD
added 2024/10/08 12:15 p.m.23 views

CVE-2024-8482

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 1.3.982 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00443EPSS
SaveExploits0References3
CVE
CVE
added 2024/10/08 11:34 a.m.66 views

CVE-2024-8482

CVE-2024-8482 affects the WordPress plugin Royal Elementor Addons and Templates (versions

6.4CVSS5.9AI score0.00443EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/10/08 3:06 a.m.10 views

WordPress Royal Elementor Addons and Templates plugin <= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Team Member Widget vulnerability discovered by Webbernaut in WordPress Plugin Royal Elementor Addons versions = 1.3.986...

6.4CVSS5.8AI score0.00443EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/10/08 12:00 a.m.17 views

WordPress Royal Elementor Addons Plugin <= 1.3.986 is vulnerable to Cross Site Scripting (XSS)

Software Royal Elementor Addons Type Plugin Vulnerable versions = 1.3.986 Fixed in 1.3.987 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8482 Patch priority Low CVSS severity Low 6.5 Developer WProyal PSID f2664b64a1b3 Credits Webbernaut Required...

6.4CVSS6AI score0.00443EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2024/10/08 12:00 a.m.9 views

WordPress plugin Royal Elementor Addons and Template 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.4CVSS5.8AI score0.00443EPSS
SaveExploits0References4
Rows per page
Query Builder