CVE-2024-33539

CVE-2024-33539 refers to a Stored XSS vulnerability in WPZOOM Addons for Elementor (Templates, Widgets) for WordPress, affecting versions up to 1.1.35. Exploitation details are not provided in the initial doc, but connected Red Hat and Wordfence entries confirm the vulnerability and indicate a re...

CVE-2024-5147

CVE-2024-5147 : The WPZOOM Addons for Elementor (Templates, Widgets) plugin for WordPress is vulnerable to unauthenticated Local File Inclusion via the grid_style parameter in all versions up to and including 1.1.37. The vulnerability allows including and executing arbitrary PHP files on the serv...

CVE-2024-4370

CVE-2024-4370 describes a stored XSS in WPZOOM Addons for Elementor (Templates, Widgets) for WordPress. Affected in all versions up to 1.1.36 due to insufficient input sanitization and output escaping on widget Image Box attributes. Exploitation requires authenticated access at contributor level ...