Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
CrocoblockJetwidgets For Elementor

7 matches found

CVE
CVE•added 2024/11/12 6:48 a.m.•94 views

CVE-2024-10323

JetWidgets For Elementor (WordPress) is affected by a Stored XSS via REST API SVG File Upload in all versions up to 1.0.18. Root cause: insufficient input sanitization and output escaping. Exploitation requires Author-level access or higher and can inject scripts that run when the SVG is viewed. ...

6.4CVSS5.7AI score0.00295EPSS
CVE
CVE•added 2024/04/09 6:59 p.m.•76 views

CVE-2024-2138

CVE-2024-2138 concerns the WordPress plugin JetWidgets For Elementor. The Red Hat and Wordfence entries describe a stored cross-site scripting (XSS) vulnerability in the Animated Box widget, affecting all versions up to and including 1.0.15. The issue arises from insufficient input sanitization a...

6.4CVSS7.6AI score0.00423EPSS
CVE
CVE•added 2024/04/09 6:59 p.m.•76 views

CVE-2024-2507

CVE-2024-2507 affects JetWidgets For Elementor plugin for WordPress. All versions up to and including 1.0.16 are vulnerable to Stored Cross-Site Scripting via the widget button URL due to insufficient input sanitization and output escaping on user-supplied attributes. Exploitation requires authen...

6.4CVSS7.6AI score0.0034EPSS
CVE
CVE•added 2023/02/13 2:32 p.m.•69 views

CVE-2023-0034

Affected product: JetWidgets For Elementor WordPress plugin. Vulnerability: Stored Cross-Site Scripting via shortcode attributes not being validated/escaped before output. Root cause: Attributes of the plugin shortcode are not properly sanitized, enabling injection. Impact: Contributors and highe...

5.4CVSS5.3AI score0.00477EPSS
CVE
CVE•added 2024/06/20 2:8 a.m.•66 views

CVE-2024-4626

CVE-2024-4626 affects the JetWidgets For Elementor plugin for WordPress. It enables Stored Cross-Site Scripting via the layout_type and id parameters in all versions

6.4CVSS5.5AI score0.00322EPSS
CVE
CVE•added 2023/01/05 4:21 p.m.•61 views

CVE-2023-0086

The CVE-2023-0086 entry concerns the WordPress JetWidgets for Elementor plugin. A CSRF vulnerability exists in versions up to 1.0.12 due to missing nonce validation on the save() function, allowing unauthenticated attackers to forge requests to modify plugin settings if a site admin interacts wit...

6.5CVSS5.9AI score0.00333EPSS
CVE
CVE•added 2021/05/05 6:28 p.m.•57 views

CVE-2021-24268

CVE-2021-24268 concerns the WordPress JetWidgets For Elementor plugin, affected versions prior to 1.0.9. The vulnerability is a stored Cross-Site Scripting (XSS) in multiple widgets, exploitable by lower-privilege users (e.g., contributors) via a similar method. The issue is documented across mul...

5.4CVSS5.2AI score0.0059EPSS