EA
Product
Elementor Addon Elements
25
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 24Low 0
Watch
Add Elementor Addon Elements to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-47361 | 8.8 | Nov 1 | WordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerability Affected: before 1.13.7 |
| CVE-2024-1358 | 6.5 | Mar 13 | The Elementor Addon Elements plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.12.12 via the render function Affected: before 1.13 |
| CVE-2024-2792 | 6.4 | Apr 9 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via widgets in all versions up to, and including, 1.13.2 due to insufficient input… Affected: before 1.13.3 |
| CVE-2024-47366 | 5.4 | Oct 6 | WordPress Elementor Addon Elements plugin <= 1.13.6 - Cross Site Scripting (XSS) vulnerability Affected: before 1.13.7 |
| CVE-2024-7122 | 5.4 | Aug 30 | Elementor Addon Elements <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets Affected: before 1.13.7 |
| CVE-2024-4401 | 5.4 | Aug 30 | Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and eae_slider_animation Parameters Affected: before 1.13.6 |
| CVE-2024-4570 | 5.4 | Jun 27 | Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 1.13.6 |
| CVE-2024-4569 | 5.4 | Jun 27 | Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 1.13.6 |
| CVE-2024-2092 | 5.4 | Jun 12 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Twitter Widget in all versions up to, and including, 1.13.3 due to… Affected: before 1.13.4 |
| CVE-2024-3743 | 5.4 | May 2 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Stack Group, Shape Separator, Content Switcher, Info Circle and… Affected: before 1.13.4 |
| CVE-2024-30422 | 5.4 | Mar 28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes Elementor Addon Elements… Affected: before 1.13.2 |
| CVE-2024-29107 | 5.4 | Mar 19 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes Elementor Addon Elements allows Stored XSS.This issue affects… Affected: before 1.12.11 |
| CVE-2024-1422 | 5.4 | Mar 13 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the modal popup widget's effect setting in all versions up to, and including,… Affected: before 1.13 |
| CVE-2024-1393 | 5.4 | Mar 13 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'icon_align' attribute of the Content Switcher widget in all versions up to,… Affected: before 1.13 |
| CVE-2024-1392 | 5.4 | Mar 13 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'button1_icon' attribute of the Dual Button widget in all versions up to,… Affected: before 1.13 |
| CVE-2024-1391 | 5.4 | Mar 13 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘eae_custom_overlay_switcher’ attribute of the Thumbnail Slider widget in… Affected: before 1.13 |
| CVE-2024-0834 | 5.4 | Feb 5 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link_to parameter in all versions up to, and including, 1.12.11 due to… Affected: through 1.12.11 |
| CVE-2021-24259 | 5.4 | May 5 | The “Elementor Addon Elements” WordPress Plugin before 1.11.2 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as… Affected: before 1.11.2 |
| CVE-2023-4723 | 5.3 | Nov 15 | The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.12.7 via the ajax_eae_post_data function Affected: through 1.12.7 |
| CVE-2023-5381 | 4.8 | Nov 15 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.12.7 due to insufficient… Affected: through 1.12.7 |
| CVE-2024-2091 | 4.6 | Mar 28 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and including, 1.13.2 due to… Affected: before 1.13.3 |
| CVE-2024-13215 | 4.3 | Jan 15 | Elementor Addon Elements <= 1.13.10 - Authenticated (Contributor+) Sensitive Information Exposure via Modal Popup Affected: before 1.14 |
| CVE-2024-8902 | 4.3 | Oct 12 | Elementor Addon Elements <= 1.13.8 - Authenticated (Contributor+) Sensitive Information Exposure via table_saved_sections Affected: before 1.13.9 |
| CVE-2023-4690 | 4.3 | Nov 15 | The Elementor Addon Elements plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.12.7 Affected: through 1.12.7 |
| CVE-2023-4689 | 4.3 | Nov 15 | The Elementor Addon Elements plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.12.7 Affected: through 1.12.7 |
Showing 25