codersaiful

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

codersaiful records in CISA KEV

No codersaiful vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ultraaddons 3 records LOW Woo Product Table 2 records MEDIUM Add To Cart Text Changer And Customize Button, Add Custom Icon 1 record LOW Min Max Control 1 record MEDIUM Quantity Plus Minus Button For Woocommerce 1 record LOW

Records

3 records in Ultraaddons · all components

TI-2024-25054 CVE-2024-37554 · GHSA-cv34-mcg3-r6xv

WordPress UltraAddons plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saiful Islam UltraAddons Elementor Lite ultraaddons-elementor-lite allows DOM-Based XSS.This issue affects UltraAddons…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0024 Published 2024-07-06 No fix listed CWE-79

TI-2024-04524 CVE-2024-4866 · GHSA-rfhq-9xcp-7phj

Cross-site scripting in codersaiful UltraAddons for Elementor

LOW 28

The UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple wi…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00363 Published 2024-07-10 No fix listed CWE-79

TI-2024-09911 CVE-2024-10696 · GHSA-v3wg-jg3p-qcmh

Authorization bypass in codersaiful UltraAddons for Elementor

LOW 21

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00497 Published 2024-11-21 No fix listed CWE-639

Open these records in search →

Critical	1
High	3
Medium	6
Low	0
No CVSS	0