Ideabox

Powerpack For Beaver Builder

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2024-12239

  • EPSS 0.36%
  • Veröffentlicht 17.12.2024 03:15:06
  • Zuletzt bearbeitet 15.04.2025 15:45:19

The PowerPack Lite for Beaver Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the navigate parameter in all versions up to, and including, 1.3.0.5 due to insufficient input sanitization and output escaping. This makes...

6.1

CVE-2024-43330

  • EPSS 0.26%
  • Veröffentlicht 18.08.2024 14:15:07
  • Zuletzt bearbeitet 15.04.2025 15:10:00

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack for Beaver Builder allows Reflected XSS.This issue affects PowerPack for Beaver Builder: from n/a before 2.37.4.

8.8

CVE-2024-39633

  • EPSS 0.42%
  • Veröffentlicht 01.08.2024 21:15:29
  • Zuletzt bearbeitet 15.04.2026 00:35:42

Improper Privilege Management vulnerability in IdeaBox PowerPack for Beaver Builder allows Privilege Escalation.This issue affects PowerPack for Beaver Builder: from n/a through 2.33.0.

5.4

CVE-2024-37409

  • EPSS 0.28%
  • Veröffentlicht 22.07.2024 09:15:08
  • Zuletzt bearbeitet 23.04.2026 15:18:35

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beaver-builder.This issue affects PowerPack Lite for Beaver Builder: from n/...

7.2

CVE-2024-37410

  • EPSS 0.56%
  • Veröffentlicht 09.07.2024 11:15:13
  • Zuletzt bearbeitet 23.04.2026 15:18:35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beaver-builder.This issue affects PowerPack Lite for Beav...

5.4

CVE-2024-2289

  • EPSS 0.34%
  • Veröffentlicht 09.04.2024 19:15:30
  • Zuletzt bearbeitet 08.04.2026 19:21:03

The PowerPack Lite for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link in multiple elements in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on user s...

6.1

CVE-2022-0176

Exploit
  • EPSS 0.86%
  • Veröffentlicht 14.02.2022 12:15:16
  • Zuletzt bearbeitet 15.04.2025 15:21:26

The PowerPack Lite for Beaver Builder WordPress plugin before 1.2.9.3 does not sanitise and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting