CVE-2024-1996

Premium Addons Pro for Elementor (WordPress) is affected by CVE-2024-1996: a stored XSS in the IHover widget link present in versions ≤ 2.9.12 due to insufficient input sanitization and output escaping on user-supplied attributes. This enables authenticated attackers with contributor-level+ permi...

CVE-2023-37869

CVE-2023-37869 concerns Premium Addons Pro for Elementor (WordPress), stating a Missing Authorization/Broken Access Control vulnerability affecting Premium Addons PRO versions up to 2.9.0. Connected sources confirm a low-to-medium risk classification with CVSS-derived impact on confidentiality/in...

CVE-2024-1997

CVE-2024-1997 affects WordPress Premium Addons PRO (Messenger Chat Widget) via the premium_fbchat_app_id parameter. All versions up to 2.9.12 are susceptible to Stored XSS, exploitable by authenticated users with contributor-level access and above. Connected sources indicate this was patched in l...

CVE-2024-2239

CVE-2024-2239 affects WordPress: Premium Addons PRO plugin vulnerable to Stored XSS via the Premium Magic Scroll module. Affected: all versions up to and including 2.9.12. Exploitation requires authenticated access at Contributor level or higher; payload executes when an injected page is loaded. ...

CVE-2024-2238

CVE-2024-2238 refers to the Premium Addons Pro for WordPress (Elementor) plugin, which is reported as vulnerable to Stored Cross-Site Scripting via the Custom Mouse Cursor module in all versions up to 2.9.12. The issue arises from insufficient input sanitization and output escaping, enabling auth...

CVE-2024-2237

Summary (CVE-2024-2237) The WordPress plugin “Premium Addons PRO” is reported with a Stored Cross‑Site Scripting flaw in the Global Badge module, affecting versions up to and including 2.9.12. The issue arises from insufficient input sanitization and output escaping, enabling an authenticated att...

CVE-2024-2000

CVE-2024-2000 affects the WordPress plugin Premium Addons PRO. The issue is stored XSS via the Multi Scroll Widget’s navigation_dots parameter due to insufficient input sanitization and output escaping, impacting all versions up to and including 2.9.12. authenticated users with contributor-level ...

CVE-2023-37868

CVE-2023-37868 concerns WordPress Premium Addons PRO (Leap13 Premium Addons PRO). Affected: Premium Addons PRO versions up to and including 2.9.0. Description: Exposure of sensitive information to an unauthorized actor. Root cause/source indicates information disclosure vulnerability in the plugi...