Lucene search

K
BdthemesElement Pack

6 matches found

CVE
CVE
added 2024/11/28 6:15 a.m.51 views

CVE-2024-10493

The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) WordPress plugin before 5.10.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the con...

5.4CVSS5.7AI score0.00036EPSS
CVE
CVE
added 2024/11/29 6:15 a.m.50 views

CVE-2024-10980

The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) WordPress plugin before 5.10.3 does not validate and escape some of its Cookie Consent block options before outputting them back in a page/post where the block is embed, which could allow u...

5.4CVSS5.7AI score0.00036EPSS
CVE
CVE
added 2024/11/05 12:15 p.m.38 views

CVE-2024-9867

The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Open Map Widget' marker_content parameter in all versions up to, and including, 5.10.2 due to insufficient input san...

5.4CVSS5.2AI score0.00044EPSS
CVE
CVE
added 2024/11/02 2:15 a.m.35 views

CVE-2024-9868

The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Age Gate Widget 'url' parameter in all versions up to, and including, 5.10.1 due to insufficient input sanitization a...

5.4CVSS5.2AI score0.00044EPSS
CVE
CVE
added 2024/11/02 2:15 a.m.34 views

CVE-2024-10310

The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom Gallery Widget 'image_title' parameter in all versions up to, and including, 5.10.1 due to insufficient input ...

6.4CVSS5.5AI score0.00044EPSS
CVE
CVE
added 2024/11/05 12:15 p.m.33 views

CVE-2024-9657

The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tooltip' parameter in all versions up to, and including, 5.10.2 due to insufficient input sanitization and output es...

6.5CVSS5.5AI score0.00177EPSS