Elementor Addon Elements Security Vulnerabilities and Issues — Elementor Addon Elements CVE List

Lucene search

WebtechstreetElementor Addon Elements

4 matches found

CVE•added 2023/11/15 11:15 p.m.•57 views

CVE-2023-5381

The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.12.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permiss...

4.8CVSS4.9AI score0.00123EPSS

CVE•added 2023/11/15 11:15 p.m.•53 views

CVE-2023-4723

The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.12.7 via the ajax_eae_post_data function. This can allow unauthenticated attackers to extract sensitive data including post/page ids and titles including those of wi...

5.3CVSS5.6AI score0.00318EPSS

CVE•added 2023/11/15 11:15 p.m.•46 views

CVE-2023-4689

The Elementor Addon Elements plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.12.7. This is due to missing or incorrect nonce validation on the eae_save_elements function. This makes it possible for unauthenticated attackers to enable/disable elem...

5.4CVSS4.5AI score0.00049EPSS

CVE•added 2023/11/15 11:15 p.m.•41 views

CVE-2023-4690

The Elementor Addon Elements plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.12.7. This is due to missing or incorrect nonce validation on the eae_save_config function. This makes it possible for unauthenticated attackers to change configuration ...

5.4CVSS4.5AI score0.00049EPSS