Read the docs

Noor Alam

Records25All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Noor Alam records in CISA KEV

No Noor Alam vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Magical Addons For Elementor 8 records LOW

Records

8 records in Magical Addons For Elementor · all components

TI-2024-25916 CVE-2024-38681 · GHSA-9c4h-7g36-9r3w

WordPress Magical Addons For Elementor plugin <= 1.1.41 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Noor alam Magical Addons For Elementor allows Stored XSS.This issue affects Magical Addons For Elementor: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00317 Published 2024-07-20 No fix listed CWE-79
TI-2024-36301 CVE-2024-54212 · GHSA-jgq7-824c-7pf2

WordPress Magical Addons For Elementor plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam Magical Addons For Elementor magical-addons-for-elementor allows Stored XSS.This issue affects Magical Addon…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00261 Published 2024-12-06 No fix listed CWE-79
TI-2024-22849 CVE-2024-34547 · GHSA-9r24-p34x-4vw4

WordPress Magical Addons For Elementor plugin <= 1.1.34 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor alam Magical Addons For Elementor allows Stored XSS.This issue affects Magical Addons For Elementor: from n/a thr…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0027 Published 2024-05-08 No fix listed CWE-79
TI-2024-04792 CVE-2024-5161 · GHSA-w6x8-pprj-4vqq

Magical Addons For Elementor <= 1.1.39 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ parameter in all versions up…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00314 Published 2024-06-06 No fix listed CWE-79
TI-2024-02731 CVE-2024-2923 · GHSA-2rw4-j3h5-72xp

Cross-site scripting in Noor Alam Magical Addons For Elementor

Priority LOW 28

The Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's text effect widget in all…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00272 Published 2024-05-09 No fix listed CWE-79
TI-2024-34579 CVE-2024-51665 · GHSA-96wr-9r65-6g5q

WordPress Magical Addons For Elementor plugin <= 1.2.1 - Server Side Request Forgery (SSRF) vulnerability

Priority LOW 23

Server-Side Request Forgery (SSRF) vulnerability in Noor Alam Magical Addons For Elementor magical-addons-for-elementor allows Server Side Request Forgery.This issue affects Magical Addons For Elementor: from n/a through…

CVSS 3.1MEDIUM 4.9 Network Low privileges No interaction EPSS 0.00572 Published 2024-11-04 No fix listed CWE-918
TI-2024-09588 CVE-2024-10352 · GHSA-8c2f-c9fc-p27q

Information disclosure in Noor Alam Magical Addons For Elementor

Priority LOW 20

The Magical Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.4 via the get_content_type function in includes/widgets/content-reveal.php.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00344 Published 2024-11-09 No fix listed CWE-200
Open these records in search →