Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
IdeaboxPowerpack Addons For Elementor

8 matches found

CVE
CVE•added 2024/03/30 10:15 a.m.•75 views

CVE-2024-2491

The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _html_tag attribute of multiple widgets in all versions up to, and including, 2.7.17 due to insufficient input sanitization and output escaping. This makes it possible for authenticated atta...

6.4CVSS7.7AI score0.0008EPSS
CVE
CVE•added 2024/02/29 1:43 a.m.•54 views

CVE-2024-1411

The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the settings of the Twitter Buttons Widget in all versions up to, and including, 2.7.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attac...

6.4CVSS6.1AI score0.00168EPSS
CVE
CVE•added 2024/06/08 5:15 a.m.•48 views

CVE-2024-3668

The PowerPack Pro for Elementor plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.10.17. This is due to the plugin not restricting low privileged users from setting a default role for a registration form. This makes it possible for authenticated atta...

8.8CVSS8.6AI score0.00173EPSS
CVE
CVE•added 2024/04/09 7:15 p.m.•42 views

CVE-2024-2492

The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Twitter Tweet widget in all versions up to, and including, 2.7.18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contrib...

6.4CVSS7.6AI score0.00144EPSS
CVE
CVE•added 2024/06/13 6:15 a.m.•39 views

CVE-2024-5787

The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' attribute within the plugin's Link Effects widget in all versions up to, and including, 2.7.20 due to insufficient input sanitization and outpu...

6.4CVSS5.5AI score0.00188EPSS
CVE
CVE•added 2024/01/03 9:15 a.m.•38 views

CVE-2023-6984

The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.13. This is due to missing or incorrect nonce validation in the powerpack-lite-for-elementor/classes/class-pp-admin-...

5.3CVSS4.5AI score0.00063EPSS
CVE
CVE•added 2024/05/30 7:15 a.m.•36 views

CVE-2024-5327

The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘pp_animated_gradient_bg_color’ parameter in all versions up to, and including, 2.7.19 due to insufficient input sanitization and output es...

6.4CVSS5.9AI score0.0026EPSS
CVE
CVE•added 2024/02/07 7:15 a.m.•26 views

CVE-2024-1055

The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's buttons in all versions up to, and including, 2.7.14 due to insufficient input sanitization and output escaping on user supplied URL values....

5.4CVSS5.6AI score0.00192EPSS