Topdigitaltrends

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Topdigitaltrends records in CISA KEV

No Topdigitaltrends vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mega Addons For Wpbakery Page Builder 3 records MEDIUM Ultimate Carousel For Elementor 1 record MEDIUM Ultimate Carousel For Wpbakery Page Builder 1 record MEDIUM

Records

3 records in Mega Addons For Wpbakery Page Builder · all components

TI-2023-00254 CVE-2023-0268 · GHSA-3xph-666w-r62g

Mega Addons For WPBakery Page Builder < 4.3.0 - Contributor+ Stored XSS

MEDIUM 58

The Mega Addons For WPBakery Page Builder WordPress plugin before 4.3.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could a…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00444 Published 2023-05-08 Fixed in 4.3.0

TI-2022-17037 CVE-2022-36798 · GHSA-hh3j-qq6p-7797

WordPress Mega Addons For WPBakery Page Builder plugin <= 4.2.7 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Topdigitaltrends Mega Addons For WPBakery Page Builder plugin <= 4.2.7 at WordPress.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00357 Published 2022-09-23 No fix listed CWE-352

TI-2022-04114 CVE-2022-4501 · GHSA-f2j2-75p6-x665

Mega Addons For WPBakery Page Builder <= 4.3.0 - Authenticated (Subscriber+) Settings Update

LOW 33

The Mega Addons plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the vc_saving_data function in versions up to, and including, 4.3.0.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00747 Published 2022-12-14 No fix listed CWE-862

Open these records in search →

Critical	0
High	2
Medium	3
Low	0
No CVSS	0