Medium
CVE-2024-56226
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
Medium
CVE-2025-24584
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.3.0 - Missing Authorization
Medium
CVE-2024-56225
Premium Addons for Elementor <= 4.10.56 - Missing Authorization
Medium
CVE-2024-56062
Royal Elementor Addons <= 1.3.987 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56063
Essential Addons for Elementor <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12061
Events Addon for Elementor <= 2.2.3 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-12340
Animation Addons for Elementor <= 1.1.6 - Authenticated (Contributor+) Sensitive Information Exposure via Content Slider and Tabs Widget Elementor Template
Medium
CVE-2024-10356
ElementsReady Addons for Elementor <= 6.4.8 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Medium
CVE-2024-54443
Advanced Data Table For Elementor <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10690
Shortcodes for Elementor <= 1.0.4 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-12059
ElementInvader Addons for Elementor <= 1.3.1 - Missing Authorization to Arbitrary Options Read
Medium
CVE-2024-54338
Hello Event Widgets For Elementor <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54278
News Ticker for Elementor <= 2.1.3 - Missing Authorization
Medium
CVE-2024-54316
Restaurant & Cafe Addon for Elementor <= 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-54369
Zita Site Builder <= 1.0.2 - Missing Authorization to Arbitrary Plugin Installation
Medium
CVE-2024-54315
Events Addon for Elementor <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-54314
Primary Addon for Elementor <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10784
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.126 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11367
Smoove connector for Elementor forms <= 4.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-12110
Gold Addons for Elementor <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) License Activation/Deactivation
Medium
CVE-2024-54260
News Kit Elementor Addons <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10689
XLTab – Accordions and Tabs for Elementor Page Builder <= 1.4 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-10692
PowerPack Elementor Addons (Free Widgets, Extensions and Templates) <= 2.8.1 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-54232
RRAddons for Elementor <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.