Medium
CVE-2024-0448
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
Medium
CVE-2024-0612
Content Views <= 3.6.2 - Authenticated(Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-6843
easy.jobs <= 2.4.6 - Missing Authorization to Settings Update
Medium
CVE-2024-0586
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scritping
Medium
CVE-2024-0585
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image URl
Medium
CVE-2024-22150
Post Grid, Image Gallery & Portfolio for Elementor | PowerFolio <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2024-0508
Orbit Fox by ThemeIsle <= 2.10.27 - Authenticated(Contributor+) Stored Cross-site Scripting via Pricing Table Elementor Widget
Medium
CVE-2024-0251
Advanced Woo Search <= 2.96 - Reflected Cross-Site Scripting
Medium
1453815d-4e28-41ec-9aa4-4fd2899c619a
Happy Elementor Addons <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-6582
ElementsKit Lite <= 3.0.3 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-22136
Droit Elementor Addons <= 3.1.5 - Cross-Site Request Forgery
Medium
32c2a25d-e660-4700-8df3-b043cf6aa78a
LiveChat Elementor <= 1.0.13 - Cross-Site Request Forgery
Medium
CVE-2023-6788
Metform Elementor Contact Form Builder <= 3.8.1 - Cross-Site Request Forgery
Medium
CVE-2023-6632
Happy Addons for Elementor <= 3.9.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-52214
Void Contact Form 7 Widget For Elementor Page Builder <= 2.3 - Missing Authorization
Medium
CVE-2023-7044
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-6984
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.13 - Cross-Site Request Forgery
Medium
CVE-2023-6986
EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor <= 3.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-52150
Dynamic Content for Elementor < 2.12.5 - Cross-Site Request Forgery
Medium
CVE-2023-51407
Split Test For Elementor <= 1.6.9 - Cross-Site Request Forgery
Medium
CVE-2023-51492
If-So Dynamic Content Personalization <= 1.6.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-51529
HT Mega <= 2.3.3 - Cross-Site Request Forgery via Several Functions
Medium
CVE-2023-51676
Happy Addons for Elementor <= 3.9.1.1 - Server Side Request Forgery
High
CVE-2023-50890
Ultimate Addons for Elementor <= 1.36.20 - Authenticated (Contributor+) Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.