CVE-2021-24273

The CVE-2021-24273 entry concerns the WordPress plugin “Clever Addons for Elementor” (versions before 2.1.0). Concrete details from connected sources show a Stored XSS vulnerability in multiple widgets that can be triggered by lower-privileged users (e.g., contributors) via a common method. Impac...

CVE-2024-2350

CVE-2024-2350 affects Clever Addons for Elementor (WordPress). It is a Stored XSS via the CAFE Icon, CAFE Team Member, and CAFE Slider widgets in all versions up to 2.1.9, caused by insufficient input sanitization and output escaping. Exploitation requires authenticated access at contributor leve...

CVE-2024-51580

CVE-2024-51580 affects WordPress plugin Clever Addons for Elementor (versions up to and including 2.2.1). The issue is an Stored Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation. Impact is described as XSS with potential leakage of inform...

CVE-2024-43324

CVE-2024-43324 corresponds to a stored cross-site scripting vulnerability in Clever Addons for Elementor. It arises from improper input neutralization during web page generation and affects Clever Addons for Elementor versions up to 2.2.0. The impact is stored XSS, with potential leakage or manip...