CVE-2024-12239
Published Dec 17, 2024The PowerPack Lite for Beaver Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the navigate parameter in all versions up to, and including, 1.3.0.5…
Vendor archive
ideabox CVEs
Beta · best-effort17 CVEs tagged to vendor ideabox — 0 Critical, 3 High, 14 Medium, 0 Low, 0 Unrated.
CVE-2024-43330
Published Aug 18, 2024Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack for Beaver Builder allows Reflected XSS.Th…
CVE-2024-37409
Published Jul 22, 2024Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beave…
CVE-2024-37410
Published Jul 9, 2024Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerp…
CVE-2024-5787
Published Jun 13, 2024The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' attribute within the pl…
CVE-2024-3668
Published Jun 8, 2024The PowerPack Pro for Elementor plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.10.17. This is due to the plugin not restricting…
CVE-2024-5327
Published May 30, 2024The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘pp_animated_gradie…
CVE-2024-2492
Published Apr 9, 2024The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Twitter Tweet widget in all versions up to, and including, 2.7.18 due…
CVE-2024-2289
Published Apr 9, 2024The PowerPack Lite for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link in multiple elements in all versions up to, and including, 1.3…
CVE-2024-2491
Published Mar 30, 2024The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the *_html_tag* attribute of multiple widgets in all versions up to, and i…
CVE-2024-1411
Published Feb 29, 2024The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the settings of the Twitter Buttons Widget in all versions up to, and incl…
CVE-2024-1055
Published Feb 7, 2024The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's buttons in all versi…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-6984
Published Jan 3, 2024The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-49739
Published Dec 14, 2023Vulnerability in IdeaBox Creations PowerPack Pro for Elementor.This issue affects PowerPack Pro for Elementor: from n/a through 2.9.23.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2022-0176
Published Feb 14, 2022The PowerPack Lite for Beaver Builder WordPress plugin before 1.2.9.3 does not sanitise and escape the tab parameter before outputting it back in an admin page, leading to a Refle…
CVE-2021-25027
Published Jan 3, 2022The PowerPack Addons for Elementor WordPress plugin before 2.6.2 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a R…
CVE-2021-24263
Published May 5, 2021The “Elementor Addons – PowerPack Addons for Elementor” WordPress Plugin before 2.3.2 for WordPress has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by…
- evidence mentions
- 1
- Buzz score
- 11.9
Showing 1-17 of 17 CVEsPage 1 of 1