CVE-2024-13215
Published Jan 15, 2025The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.10 via the 'render' function in module…
Vendor/product archive
webtechstreet / elementor_addon_elements CVEs
Beta · best-effort25 CVEs tagged to webtechstreet / elementor_addon_elements — 0 Critical, 1 High, 24 Medium, 0 Low, 0 Unrated.
CVE-2024-47361
Published Nov 1, 2024Missing Authorization vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder.This issue affects Elementor Addon Elements: from n/a through <=…
CVE-2024-8902
Published Oct 12, 2024The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.8 via the render_column function in mo…
CVE-2024-47366
Published Oct 6, 2024Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder al…
CVE-2024-7122
Published Aug 30, 2024The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.13.6 due to insufficien…
CVE-2024-4401
Published Aug 30, 2024The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ and 'eae_slider_animation' parameters in all versions up to, and includ…
CVE-2024-4570
Published Jun 27, 2024The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in versions up to, and including, 1.13.5 due to insufficient…
CVE-2024-4569
Published Jun 27, 2024The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in versions up to, and including, 1.13.5 due to insufficient…
CVE-2024-2092
Published Jun 12, 2024The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Twitter Widget in all versions up to, and including, 1.13.3 due to…
CVE-2024-3743
Published May 2, 2024The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Stack Group, Shape Separator, Content Switcher, Info Circle and Timeli…
CVE-2024-2792
Published Apr 9, 2024The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via widgets in all versions up to, and including, 1.13.2 due to insufficient input s…
CVE-2024-30422
Published Mar 28, 2024Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder.Th…
CVE-2024-2091
Published Mar 28, 2024The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and including, 1.13.2 due to insuffi…
CVE-2024-29107
Published Mar 19, 2024Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes Elementor Addon Elements allows Stored XSS.This issue affects Element…
CVE-2024-1422
Published Mar 13, 2024The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the modal popup widget's effect setting in all versions up to, and including, 1.…
CVE-2024-1393
Published Mar 13, 2024The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'icon_align' attribute of the Content Switcher widget in all versions up to,…
CVE-2024-1392
Published Mar 13, 2024The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'button1_icon' attribute of the Dual Button widget in all versions up to, an…
CVE-2024-1391
Published Mar 13, 2024The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘eae_custom_overlay_switcher’ attribute of the Thumbnail Slider widget in al…
CVE-2024-1358
Published Mar 13, 2024The Elementor Addon Elements plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.12.12 via the render function. This makes it possibl…
CVE-2024-0834
Published Feb 5, 2024The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link_to parameter in all versions up to, and including, 1.12.11 due to insuf…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-5381
Published Nov 15, 2023The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.12.7 due to insufficient inpu…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-4723
Published Nov 15, 2023The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.12.7 via the ajax_eae_post_data function. Thi…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-4690
Published Nov 15, 2023The Elementor Addon Elements plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.12.7. This is due to missing or incorrect nonce v…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-4689
Published Nov 15, 2023The Elementor Addon Elements plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.12.7. This is due to missing or incorrect nonce v…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2021-24259
Published May 5, 2021The “Elementor Addon Elements” WordPress Plugin before 1.11.2 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contri…
- evidence mentions
- 1
- Buzz score
- 11.9
Showing 1-25 of 25 CVEsPage 1 of 1