Wpxpro

Xpro Addons For Elementor

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2024-13808

  • EPSS 0.3%
  • Veröffentlicht 26.04.2025 04:22:36
  • Zuletzt bearbeitet 06.05.2025 16:25:27

The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.9 via the custom PHP widget. This is due to their only being client side controls when determining who can access th...

5.4

CVE-2024-13649

  • EPSS 0.04%
  • Veröffentlicht 08.03.2025 12:15:35
  • Zuletzt bearbeitet 11.03.2025 21:31:43

The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 1.4.6.7 due to insufficient input sanitization and output escaping. This m...

6.5

CVE-2024-12584

  • EPSS 0.2%
  • Veröffentlicht 08.01.2025 07:15:26
  • Zuletzt bearbeitet 06.03.2025 20:57:36

The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6.2 via the 'duplicate' function. This makes it possible for authenticated attackers, w...

5.4

CVE-2024-54253

  • EPSS 0.06%
  • Veröffentlicht 09.12.2024 13:15:43
  • Zuletzt bearbeitet 06.03.2025 19:54:57

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons allows Stored XSS.This issue affects Xpro Elementor Addons: from n/a through 1.4.6.1.

4.3

CVE-2024-10319

  • EPSS 0.15%
  • Veröffentlicht 05.11.2024 11:15:03
  • Zuletzt bearbeitet 08.11.2024 15:25:16

The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6 via the render function in widgets/content-toggle/layout/frontend.php. This makes it ...

5.4

CVE-2024-7791

  • EPSS 0.24%
  • Veröffentlicht 27.08.2024 11:15:04
  • Zuletzt bearbeitet 27.08.2024 13:01:37

The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘arrow’ parameter within the Post Grid widget in all versions up to, and including, 1.4.4.3 due to insufficient input saniti...

5.4

CVE-2024-43150

  • EPSS 0.17%
  • Veröffentlicht 12.08.2024 23:15:18
  • Zuletzt bearbeitet 07.03.2025 11:54:06

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons allows Stored XSS.This issue affects Xpro Elementor Addons: from n/a through 1.4.4.2.

4.8

CVE-2024-34570

  • EPSS 0.23%
  • Veröffentlicht 08.05.2024 11:15:25
  • Zuletzt bearbeitet 07.03.2025 11:54:06

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons allows Stored XSS.This issue affects Xpro Elementor Addons: from n/a through 1.4.3.