Wpxpro

Xpro Addons For Elementor

8 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2024-13808

  • EPSS 0.3%
  • Published 26.04.2025 04:22:36
  • Last modified 06.05.2025 16:25:27

The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.9 via the custom PHP widget. This is due to their only being client side controls when determining who can access th...

5.4

CVE-2024-13649

  • EPSS 0.04%
  • Published 08.03.2025 12:15:35
  • Last modified 11.03.2025 21:31:43

The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 1.4.6.7 due to insufficient input sanitization and output escaping. This m...

6.5

CVE-2024-12584

  • EPSS 0.2%
  • Published 08.01.2025 07:15:26
  • Last modified 06.03.2025 20:57:36

The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6.2 via the 'duplicate' function. This makes it possible for authenticated attackers, w...

5.4

CVE-2024-54253

  • EPSS 0.06%
  • Published 09.12.2024 13:15:43
  • Last modified 06.03.2025 19:54:57

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons allows Stored XSS.This issue affects Xpro Elementor Addons: from n/a through 1.4.6.1.

4.3

CVE-2024-10319

  • EPSS 0.15%
  • Published 05.11.2024 11:15:03
  • Last modified 08.11.2024 15:25:16

The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6 via the render function in widgets/content-toggle/layout/frontend.php. This makes it ...

5.4

CVE-2024-7791

  • EPSS 0.24%
  • Published 27.08.2024 11:15:04
  • Last modified 27.08.2024 13:01:37

The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘arrow’ parameter within the Post Grid widget in all versions up to, and including, 1.4.4.3 due to insufficient input saniti...

5.4

CVE-2024-43150

  • EPSS 0.17%
  • Published 12.08.2024 23:15:18
  • Last modified 07.03.2025 11:54:06

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons allows Stored XSS.This issue affects Xpro Elementor Addons: from n/a through 1.4.4.2.

4.8

CVE-2024-34570

  • EPSS 0.23%
  • Published 08.05.2024 11:15:25
  • Last modified 07.03.2025 11:54:06

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons allows Stored XSS.This issue affects Xpro Elementor Addons: from n/a through 1.4.3.