Priority MEDIUM 48
Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00397 · Published 2024-06-09 · No fix listed CWE-862
Priority LOW 38
Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00448 · Published 2024-04-29 · No fix listed CWE-862
Priority LOW 35
The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ma-template'…
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00317 · Published 2024-06-07 · No fix listed CWE-862
Priority LOW 31
The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Navigation Menu widget of the plugin's Mega Menu ext…
CVSS 3.1HIGH 7.2· Network · No auth · No interaction · EPSS 0.00307 · Published 2024-06-07 · No fix listed CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jewel Theme Master Addons for Elementor allows Stored XSS.This issue affects Master Addons for Elementor: from n/a thr…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00343 · Published 2024-03-27 · No fix listed CWE-79
Priority LOW 29
The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Tooltip module in all versio…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00398 · Published 2025-01-07 · No fix listed CWE-79
Priority LOW 29
The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in versions up to, and including, 2.…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00551 · Published 2024-05-02 · No fix listed CWE-79
Priority LOW 28
The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to,…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00283 · Published 2025-03-04 · No fix listed CWE-79
Priority LOW 28
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jewel Theme Master Addons for Elementor allows Stored XSS.This issue affects Master Addons for Elementor: from…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00237 · Published 2024-06-08 · No fix listed CWE-79
Priority LOW 28
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jewel Theme Master Addons for Elementor allows Stored XSS.This issue affects Master Addons for Elementor: from…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.0026 · Published 2024-06-08 · No fix listed CWE-79
Priority LOW 28
The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, a…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00344 · Published 2025-03-04 · No fix listed CWE-79
Priority LOW 28
The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 2.0…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00329 · Published 2024-05-16 · No fix listed CWE-79
Priority LOW 28
The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the title_html_tag attribute in all versions up to, and…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00257 · Published 2024-05-16 · No fix listed CWE-79
Priority LOW 28
The Master Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing Table widget in all versions up to, and including, 2.0.5.6 due to insufficient input sanitization and outp…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.0034 · Published 2024-03-27 · No fix listed CWE-79
Priority LOW 26
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jewel Theme Master Addons for Elementor allows Stored XSS.This issue affects Master Addons for Elementor: from…
CVSS 3.1MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.0026 · Published 2024-07-20 · No fix listed CWE-79
Priority LOW 24
The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-jltma-wrapper-link element in all versions up t…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00322 · Published 2024-09-10 · No fix listed CWE-79