Leap13

Premium Addons For Elementor

38 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2024-29106

  • EPSS 0.32%
  • Veröffentlicht 19.03.2024 16:15:14
  • Zuletzt bearbeitet 28.04.2026 19:23:41

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Addons for Elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.10.16.

5.4

CVE-2024-2399

  • EPSS 0.41%
  • Veröffentlicht 15.03.2024 07:15:09
  • Zuletzt bearbeitet 08.04.2026 19:21:06

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and including, 4.10.23 due to insufficient input sanitization and output escaping on user supplied attr...

5.4

CVE-2024-1680

  • EPSS 0.42%
  • Veröffentlicht 13.03.2024 16:15:25
  • Zuletzt bearbeitet 08.04.2026 18:20:45

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Settings URL of the Banner, Team Members, and Image Scroll widgets in all versions up to, and including, 4.10.21 due to insufficient inpu...

6.4

CVE-2024-0326

  • EPSS 0.61%
  • Veröffentlicht 13.03.2024 16:15:10
  • Zuletzt bearbeitet 08.04.2026 17:17:20

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Link Wrapper functionality in all versions up to, and including, 4.10.17 due to insufficient input sanitization and output escaping on...

6.4

CVE-2024-1242

  • EPSS 0.41%
  • Veröffentlicht 29.02.2024 01:43:44
  • Zuletzt bearbeitet 08.04.2026 17:18:17

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button onclick attribute in all versions up to, and including, 4.10.18 due to insufficient input sanitization and output escaping. This makes i...

5.4

CVE-2024-24831

  • EPSS 0.32%
  • Veröffentlicht 10.02.2024 08:15:09
  • Zuletzt bearbeitet 23.04.2026 15:18:04

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor.This issue affects Premium Addons for Elementor: from n/a through <= 4.10.16.

6.1

CVE-2023-34012

  • EPSS 0.38%
  • Veröffentlicht 23.06.2023 12:15:09
  • Zuletzt bearbeitet 21.11.2024 08:06:24

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Premium Addons for Elementor Premium Addons PRO plugin <= 2.8.24 versions.

5.4

CVE-2021-24257

  • EPSS 0.59%
  • Veröffentlicht 05.05.2021 19:15:07
  • Zuletzt bearbeitet 21.11.2024 05:52:42

The “Premium Addons for Elementor” WordPress Plugin before 4.2.8 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.