PT-2024-14109 · Brainstorm Force · Brainstorm Force Ultimate Addons For Beaver Builder

Name of the Vulnerable Software and Affected Versions: Brainstorm Force Ultimate Addons for Beaver Builder versions 1.35.14 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in Brainstorm Force Ultimate Addons for Beaver Builder...

CVE-2023-50890: Improper Privilege Management

Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Elementor allows Privilege Escalation.This issue affects Ultimate Addons for Elementor: from n/a through 1.36.20...

PT-2024-12046 · Vova Anokhin · Shortcodes Ultimate

Name of the Vulnerable Software and Affected Versions: Shortcodes Ultimate versions n/a through 5.12.6 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows Absolute Path Traversal in Vova Anokhin Shortcod...

CVE-2024-32685: Client-Side Enforcement of Server-Side Security

Client-Side Enforcement of Server-Side Security vulnerability in Wpmet Wp Ultimate Review allows Functionality Bypass.This issue affects Wp Ultimate Review: from n/a through 2.2.5...

CVE-2024-21746: Authentication Bypass by Spoofing

Authentication Bypass by Spoofing vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows Identity Spoofing.This issue affects Wp Ultimate Review: from n/a through = 2.3.6...

WordPress plugin Shortcodes Ultimate 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

PT-2024-13995

Name of the Vulnerable Software and Affected Versions Brainstorm Force Ultimate Addons for Elementor versions 1.36.20 and earlier Description The issue is related to Improper Privilege Management, allowing Privilege Escalation in Brainstorm Force Ultimate Addons for Elementor. Recommendations For...

CVE-2023-51398: Improper Privilege Management

Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder allows Privilege Escalation.This issue affects Ultimate Addons for Beaver Builder: from n/a through 1.35.14...

PT-2024-19033 · WordPress · Wp Ultimate Review

Name of the Vulnerable Software and Affected Versions: Wp Ultimate Review versions 2.3.2 and earlier Description: The issue is related to an Authentication Bypass by Spoofing vulnerability, allowing functionality bypass. Recommendations: For versions 2.3.2 and earlier, update to a version later...

WordPress plugin Ultimate Addons for Beaver Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin Wp Ultimate Review 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin Ultimate Addons for Beaver Builder 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

PT-2024-14110

Name of the Vulnerable Software and Affected Versions Ultimate Addons for Beaver Builder versions 1.35.13 and earlier Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability. This allows Relative Path...

CVE-2023-46205: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder allows PHP Local File Inclusion.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a through 3.19.14...

CVE-2023-51401: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder allows Relative Path Traversal.This issue affects Ultimate Addons for Beaver Builder: from n/a through 1.35.13...

CVE-2023-25050: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Vova Anokhin Shortcodes Ultimate allows Absolute Path Traversal.This issue affects Shortcodes Ultimate: from n/a through 5.12.6...

WordPress Elementor Header & Footer Builder plugin <= 1.6.26 - Authenticated (Author+) HTML Injection vulnerability

Authenticated Author+ HTML Injection vulnerability discovered by wesley wcraft in WordPress Plugin Ultimate Addons for Elementor - Lite versions = 1.6.26...

WordPress Elementor Header & Footer Builder plugin <= 1.6.28 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by wesley wcraft in WordPress Plugin Ultimate Addons for Elementor - Lite versions = 1.6.28...

WordPress Shortcodes Ultimate plugin < 7.1.2 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Shortcodes Ultimate versions 7.1.2...

CVE-2024-3548

The WP Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 7.1.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...