TP
Product
The Plus Addons For Elementor
37
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 5Medium 29Low 0
Watch
Add The Plus Addons For Elementor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-43932 | 8.8 | Nov 1 | WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Broken Access Control vulnerability Affected: before 5.6.3 |
| CVE-2024-5455 | 8.8 | Jun 21 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.6 - Authenticated (Contributor+) Local File Inclusion Affected: before 5.6.0 |
| CVE-2024-2203 | 8.8 | Mar 27 | The The Plus Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.4.1 via the Clients widget Affected: before 5.4.2; before 5.4.2 |
| CVE-2021-4331 | 8.8 | Mar 7 | The Plus Addons for Elementor plugin for WordPress is vulnerable to privilege escalation in versions up to, and including 4.1.9 (pro) and 2.0.6 (free) Affected: through 2.0.6; through 4.1.9 |
| CVE-2021-24948 | 7.5 | Jan 10 | The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not validate the qvquery parameter of the tp_get_dl_post_info_ajax AJAX action, which could allow… Affected: before 5.0.7 |
Showing 5