Lucene search
K

5 matches found

NVD
NVD
added 2025/08/12 7:15 a.m.2 views

CVE-2025-8874

The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 2.0.8.6 due to insufficient input sanitization and output...

6.4CVSS0.0023EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/08/12 6:42 a.m.7 views

CVE-2025-8874 Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox

The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 2.0.8.6 due to insufficient input sanitization and output...

6.4CVSS0.0023EPSS
Exploits0References5
CVE
CVE
added 2025/08/12 6:42 a.m.22 views

CVE-2025-8874

CVE-2025-8874 concerns Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations for WordPress. It describes a Stored Cross-Site Scripting (XSS) vulnerability in several widgets due to insufficient input sanitization/output escaping. Affected version...

6.4CVSS6AI score0.0023EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.2 views

PT-2025-32634 · WordPress +1 · The Master Addons – Elementor Addons +1

Name of the Vulnerable Software and Affected Versions: Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress versions up to and including 2.0.8.6 Description: The plugin is susceptible to Stored Cross-Site Scripting due to...

6.4CVSS5.7AI score0.0023EPSS
Exploits0References11
CNNVD
CNNVD
added 2024/08/01 12:0 a.m.4 views

WordPress plugin The Pack Elementor addons 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A path traversal vulnerability exists in...

8.8CVSS6.6AI score0.0049EPSS
Exploits0References2
Rows per page
Query Builder