CVE-2024-34562

CVE-2024-34562 is a stored XSS in Move Addons for Elementor caused by improper input neutralization during web page generation, affecting Move Addons for Elementor up to version 1.3.0. Connected sources indicate the issue has been patched in later updates; no exploitation details are provided in ...

CVE-2024-2131

The CVE-2024-2131 entry pertains to Move Addons for Elementor (WordPress). It affects all versions up to 1.2.9 and describes a Stored Cross-Site Scripting (XSS) via the plugin’s infobox and button widget due to insufficient input sanitization and output escaping on user-supplied attributes. Authe...

CVE-2024-4695

Move Addons for Elementor (WordPress) - CVE-2024-4695: Stored XSS in multiple widgets due to insufficient input sanitization/output escaping for user-supplied attributes. Affected all versions up to 1.3.1. Exploitation requires contributor-level+ authentication to inject scripts that execute when...

CVE-2024-10360

The CVE-2024-10360 entry concerns Move Addons for Elementor (WordPress) with Sensitive Information Exposure in all versions up to 1.3.5. Affected component paths include render in widget.php files (e.g., includes/widgets/accordion/widget.php, includes/widgets/remote-template/widget.php). Reports ...

CVE-2024-29920

CVE-2024-29920 corresponds to a Stored XSS in Move Addons for Elementor plugin for WordPress, caused by improper neutralization of input during web page generation. The affected component is Move Addons for Elementor versions 1.2.9 and earlier; exploit path is via a cross-site scripting payload s...

CVE-2024-47396

The CVE-2024-47396 entry concerns the WordPress plugin Move Addons for Elementor (affected versions

CVE-2024-56254

CVE-2024-56254 concerns Move Addons for Elementor. The initial description specifies an input- handling flaw that leads to a Stored XSS in Move Addons for Elementor, affecting versions from n/a up to and including 1.3.6. Connected documents corroborate the same vulnerability as a Stored Cross-Sit...

CVE-2024-47364

CVE-2024-47364 is a stored Cross-Site Scripting vulnerability in Move Addons for Elementor for versions ≤ 1.3.4. Evidence from Patchstack and CVE entries shows that the issue affects this plugin, and a fix was released in version 1.3.5. Affected product: Move Addons for Elementor. Remediation: up...

CVE-2024-30525

Technical details about CVE-2024-30525 are not provided in the supplied documents. Public information on affected versions and impact is not confirmed here; monitor for official advisories from vendors and CVE databases.