CVE-2024-56252

CVE-2024-56252 : Stored XSS in Enter Addons (WordPress plugin). Root cause: improper neutralization of input during web page generation. Affected: Enter Addons – from n/a through 2.1.9. Exploitation: stored cross-site scripting via plugin-generated pages. Remediation: upgrade to version 2.1.9 or ...

CVE-2024-7611

CVE-2024-7611 affects Enter Addons – Ultimate Template Builder for Elementor (WordPress). The vulnerability is a Stored Cross-Site Scripting via the Events Card widget's tag attribute, caused by insufficient input sanitization and output escaping on user-supplied attributes in versions up to 2.1....

CVE-2024-43225

CVE-2024-43225 affects Enter Addons (WordPress plugin for Elementor). Evidence in connected data shows a Stored Cross-Site Scripting vulnerability that is exploitable by authenticated users (Contributor+). Root cause reported in multiple sources points to improper handling/neutralization of input...

CVE-2024-10868

CVE-2024-10868 affects Enter Addons – Ultimate Template Builder for Elementor (WordPress) up to version 2.1.9. The vulnerability allows authenticated users with Contributor+ privileges to perform Information Exposure via the Advanced Tabs widget, exposing data from private/draft posts created by ...

CVE-2024-47625

CVE-2024-47625 : WordPress plugin Enter Addons – Ultimate Template Builder for Elementor contains a stored XSS via improper input neutralization in web page generation. Affected versions are n/a through 2.1.8; update to 2.1.9 or later to fix. PatchStack notes the fix in 2.1.9; CVSS/metrics in con...

CVE-2024-37263

CVE-2024-37263 is a stored Cross-Site Scripting (XSS) vulnerability in WordPress plugin Enter Addons – Ultimate Template Builder for Elementor. Affected software: Enter Addons: from n/a through 2.1.6. The issue arises from improper neutralization of input during web page generation. Impact is sto...

CVE-2024-3680

CVE-2024-3680 affects the WordPress plugin Enter Addons – Ultimate Template Builder for Elementor. It is a Stored XSS via the Animation Title widget img tag in all versions up to 2.1.5, requiring authenticated access with Contributor or higher. The vulnerability allows injecting arbitrary scripts...

CVE-2024-3831

CVE-2024-3831 (Enter Addons – Ultimate Template Builder for Elementor) : The WordPress plugin is vulnerable to a Stored Cross-Site Scripting (XSS) in the Heading widget across all versions up to 2.1.5 due to insufficient input sanitization and output escaping. Exploitation requires authentication...