Medium
CVE-2022-45371
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
Medium
CVE-2023-23683
White Label Branding for Elementor Page Builder <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-1169
OoohBoi Steroids for Elementor <= 2.1.4 - Missing Authorization leading to Authenticated (Subscriber+) Image Upload
Medium
CVE-2023-0280
Ultimate Carousel For Elementor <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
df413b9d-5c22-4276-a11b-4f193c48740d
HT Builder <= 1.2.9 - Cross-Site Request Forgery via plugin_activation
Medium
CVE-2023-23791
HT Menu <= 1.2.1 - Cross-Site Request Forgery via plugin_activation
Medium
CVE-2023-28989
Happy Addons for Elementor <= 3.8.2 - Cross-Site Request Forgery via handle_optin_optout()
High
CVE-2023-3124
Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option
Medium
CVE-2023-27454
Rife Elementor Extensions & Templates <= 1.1.10 - Missing Authorization via import_templates
Medium
CVE-2023-0085
Metform Elementor Contact Form Builder <= 3.2.1 - reCaptcha Protection Bypass
Medium
CVE-2023-0484
Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks <= 1.1.5 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-0336
OoohBoi Steroids for Elementor <= 2.1.3 - Missing Authorization leading to Authenticated (Subscriber+) Attachment Deletion
Medium
CVE-2023-0498
WP Education <= 1.2.6 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-0496
HT Event <= 1.4.5 - Cross-Site Request Forgery leading to Arbitrary Plugin Activation
Medium
CVE-2023-0495
HT Slider For Elementor <= 1.3.9 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-0497
HT Portfolio <= 1.1.5 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-25976
Integration for Contact Form 7 and Zoho CRM, Bigin <= 1.2.2 - Cross-Site Request Forgery via settings_page function
Medium
CVE-2022-46853
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 5.0.4 - Cross-Site Request Forgery in rttpg_spare_me
Medium
CVE-2022-46851
Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 3.1.20 - Cross-Site Request Forgery in add_to_favorite
Medium
CVE-2022-47166
Void Contact Form 7 Widget For Elementor Page Builder <= 2.1.1 - Cross-Site Request Forgery in void_cf7_opt_in_user_data_track
Medium
CVE-2022-45076
Flexible Elementor Panel <= 2.3.8 - Cross Site Request Forgery
High
CVE-2022-45831
Image Hover Effects Plugin - Caption Hover with Carousel <= 2.8 - Unauthenticated Stored Cross Site Scripting
High
CVE-2023-0084
Metform Elementor Contact Form Builder <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-24374
Material Design Icons for Page Builders <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.