Login Request a demo
PA
Product
Premium Addons
by Leap13 · last CVE Jun 19, 2024
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 1Medium 7Low 0
Severity
All severities8Critical0High1Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Premium Addons to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-37869
8.8
1%
Jun 19
Missing Authorization vulnerability in Premium Addons Premium Addons PRO.This issue affects Premium Addons PRO: from n/a through 2.9.0
Affected: before 2.9.1
CVE-2023-37868
6.5
1%
Nov 30
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Leap13 Premium Addons PRO.This issue affects Premium Addons PRO: from n/a through 2.9.0
Affected: through 2.9.0
CVE-2024-2239
5.4
0%
Mar 13
The Premium Addons PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Premium Magic Scroll module in all versions up to, and including, 2.9.12 due to…
Affected: before 2.9.13
CVE-2024-2238
5.4
0%
Mar 13
The Premium Addons PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom Mouse Cursor module in all versions up to, and including, 2.9.12 due to…
Affected: before 2.9.13
CVE-2024-2237
5.4
0%
Mar 13
The Premium Addons PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Global Badge module in all versions up to, and including, 2.9.12 due to…
Affected: before 2.9.13
CVE-2024-2000
5.4
0%
Mar 13
The Premium Addons PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'navigation_dots' parameter of the Multi Scroll Widget in all versions up to, and…
Affected: before 2.9.13
CVE-2024-1997
5.4
0%
Mar 13
The Premium Addons PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'premium_fbchat_app_id' parameter of the Messenger Chat Widget in all versions up…
Affected: before 2.9.13
CVE-2024-1996
5.4
0%
Mar 13
The Premium Addons PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's IHover widget link in all versions up to, and including, 2.9.12 due to…
Affected: before 2.9.13
Showing 8