Master-addons

Master Addons

16 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2024-3134

  • EPSS 0.31%
  • Veröffentlicht 16.05.2024 22:15:09
  • Zuletzt bearbeitet 29.01.2025 21:53:42

The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the title_html_tag attribute in all versions up to, and including, 2.0.6.0 due to insu...

5.4

CVE-2024-4580

  • EPSS 0.3%
  • Veröffentlicht 16.05.2024 12:15:13
  • Zuletzt bearbeitet 30.01.2025 15:55:44

The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 2.0.6.0 due to insufficient input...

5.4

CVE-2024-4265

  • EPSS 0.2%
  • Veröffentlicht 02.05.2024 17:15:35
  • Zuletzt bearbeitet 03.02.2025 19:26:56

The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in versions up to, and including, 2.0.5.9 due to insufficient inpu...

8.8

CVE-2024-33595

  • EPSS 0.49%
  • Veröffentlicht 29.04.2024 10:15:08
  • Zuletzt bearbeitet 03.02.2025 20:37:50

Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1.

5.4

CVE-2024-29911

  • EPSS 0.18%
  • Veröffentlicht 27.03.2024 07:15:51
  • Zuletzt bearbeitet 28.01.2025 20:25:31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jewel Theme Master Addons for Elementor allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1.

5.4

CVE-2024-2139

  • EPSS 0.17%
  • Veröffentlicht 27.03.2024 03:15:12
  • Zuletzt bearbeitet 28.01.2025 19:24:14

The Master Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing Table widget in all versions up to, and including, 2.0.5.6 due to insufficient input sanitization and output escaping. This makes it pos...