Ultimate Addons For Elementor Vulnerabilities

[en] Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Qamar Sheeraz, Nasir Ahmad, GenialSouls Mega Addons For Elementor allows Stored XSS.This issue affects Mega Addons For Elementor: from n/a through 1.9.

Affected:

up to 1.9

Fix:

No patched version reported

Disclosed:

Aug 18, 2024

CVE-2024-43267 on NVD →

The Mega Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts i...

CVSS:

6.4

Affected:

up to 1.9

Fix:

No patched version reported

Disclosed:

Aug 12, 2024

CVE-2024-43267 on NVD →

[en] Missing Authorization vulnerability in Qamar Sheeraz, Nasir Ahmad Mega Addons For Elementor.This issue affects Mega Addons For Elementor: from n/a through 1.8.

Affected:

up to 1.9

Fixed in:

1.9

Disclosed:

Apr 17, 2024

CVE-2024-32515 on NVD →

The Mega Addons For Elementor plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.8. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

4.3

Affected:

up to 1.8

Fixed in:

1.9

Disclosed:

Apr 15, 2024

CVE-2024-32515 on NVD →