vulnerability patching

Happy Addons for Elementor Vulnerability – Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View Widget – CVE-2024-6627 | WordPress Plugin Vulnerability Report

By Your WP Guy / Jul 26, 2024

Plugin Name: Happy Addons for Elementor Key Information: Software Type: Plugin Software Slug: happy-elementor-addons Software Status: Active Software Author: thehappymonster Software Downloads: 7,563,441 Active Installs: 400,000 Last Updated: July 29, 2024 Patched Versions: 3.11.3 Affected Versions: <= 3.11.2 Vulnerability Details: Name: Happy Addons for Elementor <= 3.11.2 Type: Authenticated (Contributor+) Stored Cross-Site Scripting via PDF…

Read More

Royal Elementor Addons and Templates Vulnerability – Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget – CVE-2024-5818 | WordPress Plugin Vulnerability Report

By Your WP Guy / Jul 23, 2024

Plugin Name: Royal Elementor Addons and Templates Key Information: Software Type: Plugin Software Slug: royal-elementor-addons Software Status: Active Software Author: wproyal Software Downloads: 6,367,071 Active Installs: 400,000 Last Updated: July 29, 2024 Patched Versions: 1.3.981 Affected Versions: <= 1.3.980 Vulnerability Details: Name: Royal Elementor Addons and Templates <= 1.3.980 Type: Authenticated (Contributor+) DOM-Based Stored Cross-Site…

Read More

ElementsKit Elementor Addons Vulnerability – Unauthenticated Information Exposure via ekit_widgetarea_content Function – CVE-2024-6455 | WordPress Plugin Vulnerability Report

By Your WP Guy / Jul 18, 2024

Plugin Name: ElementsKit Elementor addons Key Information: Software Type: Plugin Software Slug: elementskit-lite Software Status: Active Software Author: xpeedstudio Software Downloads: 21,730,790 Active Installs: 1,000,000 Last Updated: July 29, 2024 Patched Versions: 3.2.1 Affected Versions: <= 3.2.0 Vulnerability Details: Name: ElementsKit Elementor addons <= 3.2.0 Type: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE: CVE-2024-6455 CVSS Score: 5.4 Publicly Published: July…

Read More

Premium Addons for Elementor Vulnerability – Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Animated Text Widget – CVE-2024-6495 | WordPress Plugin Vulnerability Report

By Your WP Guy / Jul 11, 2024

Plugin Name: Premium Addons for Elementor Key Information: Software Type: Plugin Software Slug: premium-addons-for-elementor Software Status: Active Software Author: leap13 Software Downloads: 33,726,442 Active Installs: 700,000 Last Updated: July 27, 2024 Patched Versions: 4.10.37 Affected Versions: <= 4.10.36 Vulnerability Details: Name: Premium Addons for Elementor <= 4.10.36 Type: Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via…

Read More

Ocean Extra Vulnerability – Authenticated (Contributor+) Stored Cross-Site Scripting – CVE-2024-37489 | WordPress Plugin Vulnerability Report

By Your WP Guy / Jul 4, 2024

Plugin Name: Ocean Extra Key Information: Software Type: Plugin Software Slug: ocean-extra Software Status: Active Software Author: oceanwp Software Downloads: 21,640,506 Active Installs: 600,000 Last Updated: July 26, 2024 Patched Versions: 2.3.0 Affected Versions: <= 2.2.9 Vulnerability Details: Name: Ocean Extra <= 2.2.9 Type: Authenticated (Contributor+) Stored Cross-Site Scripting CVE: CVE-2024-37489 CVSS Score: 6.4 Publicly…

Read More

Link Whisper Free Vulnerability- Authenticated (Contributor+) PHP Object Injection – CVE-2024-2693 |WordPress Plugin Vulnerability Report

By Your WP Guy / Mar 26, 2024

Plugin Name: Link Whisper Free Key Information: Software Type: Plugin Software Slug: link-whisper Software Status: Active Software Author: linkwhspr Software Downloads: 449,941 Active Installs: 30,000 Last Updated: March 26, 2024 Patched Versions: 0.7.2 Affected Versions: <= 0.7.1 Vulnerability Details: Name: Link Whisper Free <= 0.7.1 Authenticated (Contributor+) PHP Object Injection Type: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE: CVE-2024-2693 CVSS…

Read More

Check & Log Email Vulnerability – Unauthenticated Hook Injection – CVE-2024-0866 |WordPress Plugin Vulnerability Report

By Your WP Guy / Mar 25, 2024

Plugin Name: Check & Log Email Key Information: Software Type: Plugin Software Slug: check-email Software Status: Active Software Author: checkemail Software Downloads: 1,430,487 Active Installs: 100,000 Last Updated: March 25, 2024 Patched Versions: 1.0.10 Affected Versions: <= 1.0.9 Vulnerability Details: Name: Check & Log Email <= 1.0.9 Title: Unauthenticated Hook Injection Type: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE: CVE-2024-0866…

Read More