Medium
CVE-2024-7791
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
Medium
CVE-2024-6804
Jeg Elementor Kit <= 2.6.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File
Medium
CVE-2024-43932
The Plus Addons for Elementor Page Builder Lite <= 5.6.2 - Missing Authorization
Medium
CVE-2024-2254
RT Easy Builder – Advanced addons for Elementor <= 2.3 - Authenticated (Contributor+) Stored Cross-site Scripting
Medium
CVE-2024-5502
Piotnet Addons For Elementor <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Medium
CVE-2024-5583
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget Settings
Critical
CVE-2024-5335
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 1.6.4 - Unauthenticated PHP Object Injection
Medium
CVE-2024-5576
Tutor LMS Elementor Addons <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Course Carousel Widget
Medium
CVE-2024-5763
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget
Medium
CVE-2024-6575
The Plus Addons for Elementor <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TP Page Scroll Widget
Medium
CVE-2024-43293
Recipe Card Blocks for Gutenberg & Elementor <= 3.3.1 - Missing Authorization
Medium
CVE-2024-43324
Clever Addons for Elementor <= 2.2.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-43291
Void Contact Form 7 Widget For Elementor Page Builder <= 2.4.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-43292
Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.16 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2023-0714
Metform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File Upload
Medium
CVE-2024-43342
Ultimate Store Kit Elementor Addons <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-43328
EmbedPress <= 4.0.9 - Unauthenticated Local File Inclusion
High
CVE-2024-43281
Void Elementor Post Grid Addon for Elementor Page builder <= 2.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-7146
JetTabs <= 2.2.3 - Authenticated (Contributor+) Arbitrary Local File Inclusion
Medium
CVE-2024-7147
JetBlocks <= 1.3.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-7247
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Gallery and Countdown Widgets
Medium
CVE-2024-7092
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via no_more_items_text Parameter
High
CVE-2024-43271
Woo Products Widgets For Elementor <= 2.0.4 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-43267
Mega Addons For Elementor <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.