Themesgrove ≫ All-in-one Addons For Elementor

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

5.4

CVE-2025-2330

EPSS 0.03%
Veröffentlicht 02.07.2025 09:23:24
Zuletzt bearbeitet 10.07.2025 15:25:12

The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button+modal' widget in all versions up to, and including, 2.5.4 due to insufficient input sanitization and output esc...

4.3

CVE-2024-10321

EPSS 0.13%
Veröffentlicht 08.03.2025 09:15:29
Zuletzt bearbeitet 13.03.2025 13:07:01

The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.5.4 in elements/advanced-tab/template/view.php. This makes it possible for authenticated atta...

5.4

CVE-2024-37428

EPSS 0.2%
Veröffentlicht 22.07.2024 09:15:09
Zuletzt bearbeitet 21.11.2024 09:23:49

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themesgrove WidgetKit allows Stored XSS.This issue affects WidgetKit: from n/a through 2.5.0.

5.4

CVE-2024-2137

EPSS 0.11%
Veröffentlicht 12.04.2024 03:15:07
Zuletzt bearbeitet 08.04.2025 15:21:17

The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple pricing widgets (e.g. Pricing Single, Pricing Icon, Pricing Tab) in all versions up to, and including, 2.4.8 due to insuffi...

4.8

CVE-2022-4256

Exploit

EPSS 0.23%
Veröffentlicht 02.01.2023 22:15:16
Zuletzt bearbeitet 10.04.2025 19:15:52

The All-in-One Addons for Elementor WordPress plugin before 2.4.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html cap...

5.4

CVE-2021-24267