Elementor - Header, Footer & Blocks Template vulnerabilities

Product

Elementor - Header, Footer & Blocks Template

by Brainstormforce · last CVE Jul 22, 2024

CVEs

On KEV

5.4

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 3Low 0

Severity

Exploitation

Watch

Add Elementor - Header, Footer & Blocks Template to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-33933	5.4	0%	Jul 22	WordPress Elementor Header & Footer Builder plugin <= 1.6.35 - Contributor+ DOM-Based Cross Site Scripting (XSS) vulnerability Affected: before 1.6.36
CVE-2024-5757	5.4	0%	Jun 13	Elementor Header & Footer Builder <= 1.6.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Title Widget Affected: before 1.6.36
CVE-2021-24256	5.4	1%	May 5	The “Elementor – Header, Footer & Blocks Template” WordPress Plugin before 1.5.8 has two widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users… Affected: before 1.5.8