CVE-2024-2043

The CVE CVE-2024-2043 concerns the EleForms – All In One Form Integration including DB for Elementor WordPress plugin. A missing capability check when downloading form submissions allows unauthenticated users to view submissions in all versions up to and including 2.9.9.7. Root cause: absent auth...

CVE-2024-2082

CVE-2024-2082 : EleForms – All In One Form Integration including DB for Elementor (WordPress) suffers stored XSS in multiple parameters due to insufficient input sanitization/output escaping in all versions up to 2.9.9.7. Attackers can exploit without authentication to inject scripts executed on ...