webtechstreet elementor_addon_elements vulnerabilities (CVE)

CVE records published for webtechstreet elementor_addon_elements, newest first. Follow to get an email when a new one appears.

4 results
6.4Medium
CVE-2024-1422

Elementor Addon Elements <= 1.12.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Modal Popup effet

wpvibes Addon Elements for Elementor (formerly Elementor Addon Elements); webtechstreet elementor_addon_elements

The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the modal popup widget's effect setting in all versions up to, and including, 1.12.12 due to insufficient input sanitization and output escaping on user supplie…

6.4Medium
CVE-2024-1392

Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dual Button Widget

wpvibes Addon Elements for Elementor (formerly Elementor Addon Elements); webtechstreet elementor_addon_elements

The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'button1_icon' attribute of the Dual Button widget in all versions up to, and including, 1.12.12 due to insufficient input sanitization and output escaping.…

6.4Medium
CVE-2024-0834
webtechstreet Elementor Addon Elements

The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link_to parameter in all versions up to, and including, 1.12.11 due to insufficient input sanitization and output escaping. This makes it possible for authe…