Powerpack Addons For Elementor vulnerabilities | LiveThreat CVE Feed

Product

Powerpack Addons For Elementor

by Ideabox · last CVE Jun 13, 2024

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 0High 1Medium 10Low 0

Severity

All severities11 Critical0 High1 Medium10 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Powerpack Addons For Elementor to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-3668	8.8	0%	Jun 8	PowerPack Pro for Elementor <= 2.10.17 - Authenticated (Contributor+) Privilege Escalation Affected: before 2.10.18
CVE-2023-49739	6.1	0%	Dec 14	WordPress PowerPack Pro for Elementor plugin <= 2.9.23 - Reflected Cross Site Scripting (XSS) vulnerability Affected: before 2.9.24
CVE-2021-25027	6.1	1%	Jan 3	PowerPack Addons for Elementor < 2.6.2 - Reflected Cross-Site Scripting Affected: before 2.6.2
CVE-2024-5787	5.4	0%	Jun 13	PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Effects Widget Affected: before 2.7.21
CVE-2024-5327	5.4	0%	May 30	PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting Affected: before 2.7.20
CVE-2024-2492	5.4	0%	Apr 9	PowerPack Addons for Elementor <= 2.7.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Tweet Widget Affected: before 2.7.19
CVE-2024-2491	5.4	0%	Mar 30	PowerPack Addons for Elementor <= 2.7.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via _html_tag Affected: before 2.7.18
CVE-2024-1411	5.4	0%	Feb 20	PowerPack Addons for Elementor <= 2.7.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Buttons Widget Affected: before 2.7.16
CVE-2024-1055	5.4	0%	Feb 7	PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 2.7.15
CVE-2021-24263	5.4	1%	May 5	The “Elementor Addons – PowerPack Addons for Elementor” WordPress Plugin before 2.3.2 for WordPress has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by… Affected: before 2.3.2
CVE-2023-6984	4.3	0%	Jan 3	PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.13 - Cross-Site Request Forgery Affected: before 2.7.14