CVE-2024-37554

The CVE-2024-37554 entry concerns the WordPress plugin UltraAddons Elementor Lite (Header & Footer Builder, Menu Builder, Cart Icon, Shortcode) with versions up to 1.1.6. The underlying issue is Improper Neutralization of Input During Web Page Generation, i.e., Cross-Site Scripting (XSS). Affecte...

CVE-2024-10696

CVE-2024-10696 affects UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS, Woo Widget, Menu Builder, Anywhere Elementor Shortcode) for WordPress. Versions

CVE-2024-4866

CVE-2024-4866 affects the UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS, Woo Widget, Menu Builder, Anywhere Elementor Shortcode) for WordPress. According to Red Hat and Wordfence data, all versions up to 1.1.6 are vulnerable to a Stored Cross-Site Scripting condit...