PT-2024-16191 · WordPress · The Ultimate Bootstrap Elements For Elementor

Name of the Vulnerable Software and Affected Versions: The Ultimate Bootstrap Elements for Elementor plugin for WordPress versions up to, and including, 1.4.6 Description: The issue allows authenticated attackers with Contributor-level access and above to extract sensitive data, including the...

PT-2023-17674 · WordPress · Essential Blocks

Name of the Vulnerable Software and Affected Versions: The Essential Blocks plugin for WordPress versions up to, and including, 4.0.6 Description: The issue arises from a missing capability check on the templates function, allowing unauthorized use of functionality. This enables subscriber-level...

CVE-2023-2085: Missing Authorization

The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the templates function in versions up to, and including, 4.0.6. This makes it possible for subscriber-level attackers to obtain plugin template information. While a...

Arbitrary file deletion

LibreHealthIO lh-ehr version REL-2.0.0 contains an Authenticated Local File Disclosure vulnerability in Importing of templates allows local file disclosure that can result in Disclosure of sensitive files on the server. This attack appear to be exploitable via User controlled variable in import...