Read the docs

staxwp

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

staxwp records in CISA KEV

No staxwp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Stax 3 records LOW Buddybuilder 1 record LOW Visibility Logic For Elementor 1 record LOW

Records

3 records in Stax · all components

TI-2024-25041 CVE-2024-37541 · GHSA-vc7c-cf39-p8pq

WordPress Elementor Addons, Widgets and Enhancements – Stax plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StaxWP Elementor Addons, Widgets and Enhancements – Stax stax-addons-for-elementor allows DOM-Based XSS.This issue aff…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0024 Published 2024-07-06 No fix listed CWE-79
TI-2023-02053 CVE-2023-2189 · GHSA-2qc2-jxhg-7phc

Elementor Addons, Widgets and Enhancements – Stax <= 1.4.3 - Missing Authorization in toggle_widget

Priority LOW 21

The Elementor Addons, Widgets and Enhancements – Stax plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the toggle_widget function in versions up to, and includi…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00595 Published 2023-06-09 No fix listed CWE-862
Open these records in search →