Lucene search
K

186 matches found

NVD
NVD
added 2023/12/15 3:15 p.m.8 views

CVE-2023-49184

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Parallax Slider Block allows Stored XSS.This issue affects Parallax Slider Block: from n/a through 1.2.4...

5.9CVSS0.00118EPSS
Exploits0References1
OSV
OSV
added 2023/12/15 3:15 p.m.0 views

CVE-2023-49184

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Parallax Slider Block allows Stored XSS.This issue affects Parallax Slider Block: from n/a through 1.2.4...

5.4CVSS7.3AI score
Exploits0References1
Prion
Prion
added 2023/12/15 3:15 p.m.18 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Parallax Slider Block allows Stored XSS.This issue affects Parallax Slider Block: from n/a through 1.2.4...

4.9CVSS6.9AI score0.00118EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/15 2:56 p.m.20 views

CVE-2023-49184 WordPress Parallax Slider Block Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Parallax Slider Block allows Stored XSS.This issue affects Parallax Slider Block: from n/a through 1.2.4...

5.9CVSS5.9AI score0.00118EPSS
Exploits0References1
CVE
CVE
added 2023/12/15 2:56 p.m.54 views

CVE-2023-49184

CVE-2023-49184 corresponds to a Stored XSS in WPDeveloper Parallax Slider Block. Affected versions are Parallax Slider Block:

5.9CVSS6.7AI score0.00118EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2023/11/18 11:15 p.m.17 views

CVE-2023-32245

Cross-Site Request Forgery CSRF vulnerability in WPDeveloper Essential Addons for Elementor Pro.This issue affects Essential Addons for Elementor Pro: from n/a through 5.4.8...

8.8CVSS0.00162EPSS
Exploits0References1
Prion
Prion
added 2023/11/18 11:15 p.m.19 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WPDeveloper Essential Addons for Elementor Pro.This issue affects Essential Addons for Elementor Pro: from n/a through 5.4.8...

6.8CVSS7.2AI score0.00162EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/11/18 10:32 p.m.54 views

CVE-2023-32245

CVE-2023-32245 affects WordPress Essential Addons for Elementor Pro (versions up to and including 5.4.8). Connected sources specify a Server-Side Request Forgery (SSRF) vulnerability that is unauthenticated. The issue is mitigated by upgrading to version 5.4.9 or later. Exploitation status is not...

8.8CVSS8.5AI score0.00162EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/18 10:32 p.m.14 views

CVE-2023-32245 WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Server Side Request Forgery (SSRF)

Cross-Site Request Forgery CSRF vulnerability in WPDeveloper Essential Addons for Elementor Pro.This issue affects Essential Addons for Elementor Pro: from n/a through 5.4.8...

5.4CVSS7AI score0.00162EPSS
Exploits0References1
NVD
NVD
added 2023/11/07 5:15 p.m.10 views

CVE-2022-46809

Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX – Multi-criteria Rating & Reviews for WooCommerce.This issue affects ReviewX – Multi-criteria Rating & Reviews for WooCommerce: from n/a through 1.6.7...

9.8CVSS0.00505EPSS
Exploits0References1
CVE
CVE
added 2023/11/07 4:37 p.m.27 views

CVE-2022-46809

CVE-2022-46809 affects WordPress ReviewX – Multi-criteria Rating & Reviews for WooCommerce (WPDeveloper). The vulnerable component is ReviewX CSV export functionality (CSV injection) in ReviewX

9.8CVSS8.6AI score0.00505EPSS
Exploits0References1Affected Software1
0day.today
0day.today
added 2023/09/19 12:0 a.m.375 views

WordPress Essential Blocks 4.2.0 / Essential Blocks Pro 1.1.0 PHP Object Injection Vulnerability

Vulnerability Summary from Wordfence Intelligence Description: Insecure Deserialization/PHP Object Injection via queries Affected Plugin: Essential Blocks, Essential Blocks Pro Plugin slug: essential-blocks, essential-blocks-pro Vendor: WPDeveloper Affected versions: = 4.2.0 Free and = 1.1.0 Pro...

9.8CVSS8.8AI score0.04035EPSS
Exploits3
Patchstack
Patchstack
added 2023/09/15 12:0 a.m.9 views

WordPress Essential Addons for Elementor Plugin <= 5.8.8 is vulnerable to Privilege Escalation

Software Essential Addons for Elementor Type Plugin Vulnerable versions = 5.8.8 Fixed in 5.8.9 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-41955 Patch priority High CVSS severity High 8.8 Developer WPDeveloper PSID 80be75758179...

8.8CVSS6.9AI score0.00348EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2023/08/29 9:15 p.m.12 views

CVE-2023-32241

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPDeveloper Essential Addons for Elementor Pro plugin = 5.4.8 versions...

7.1CVSS6.3AI score0.00088EPSS
Exploits0References1
Prion
Prion
added 2023/08/29 9:15 p.m.13 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPDeveloper Essential Addons for Elementor Pro plugin = 5.4.8 versions...

5.8CVSS6AI score0.00088EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/08/29 8:11 p.m.41 views

CVE-2023-32241

CVE-2023-32241 affects the WordPress plugin Essential Addons for Elementor Pro (v

7.1CVSS6AI score0.00088EPSS
Exploits0References1Affected Software1
GithubExploit
GithubExploit
added 2023/08/09 6:24 p.m.740 views

Exploit for Missing Authorization in Wpdeveloper Simple_301_Redirects

CVE-2021-24356 Simple 301 Redirects by BetterLinks - 2.0.0 – 2...

8.8CVSS8.7AI score0.44302EPSS
Exploits3
GithubExploit
GithubExploit
added 2023/07/29 8:43 p.m.249 views

Exploit for Improper Authentication in Wpdeveloper Essential_Addons_For_Elementor

Mass-CVE-2023-32243 Mass-CVE-2023-32243 !...

9.8CVSS9.6AI score0.93509EPSS
Exploits8
Wordfence Blog
Wordfence Blog
added 2023/05/31 12:27 p.m.22 views

WPDeveloper Addresses Privilege Escalation Vulnerability in ReviewX WordPress Plugin

On May 20, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for a Privilege Escalation vulnerability in WPDeveloper’s ReviewX plugin, which is actively installed on more than 10,000 WordPress websites. This vulnerability makes it possible for an...

6.5CVSS6.9AI score0.26793EPSS
Exploits4
GithubExploit
GithubExploit
added 2023/05/14 7:32 p.m.202 views

Exploit for Improper Authentication in Wpdeveloper Essential_Addons_For_Elementor

CVE-2023-32243 Essential Addons for Elementor - Unauthorized...

9.8CVSS9.7AI score0.93509EPSS
Exploits8
Rows per page
Query Builder