Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: nicheaddons Component: Charity Addon For Elementor Clear all filters
TI-2024-11190 CVE-2024-12062 · GHSA-5vhp-6mvg-gg49

Charity Addon for Elementor <= 1.3.3 - Authenticated (Contributor+) Post Disclosure

Priority LOW 20

The Charity Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.3.3 via the 'nacharity_elementor_template' shortcode due to insufficient restrictions on…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00309 Published 2024-12-03 No fix listed CWE-639
TI-2024-34842 CVE-2024-51938 · GHSA-vrqp-jr32-665v

WordPress Charity Addon for Elementor plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Charity Addon for Elementor charity-addon-for-elementor allows DOM-Based XSS.This issue affects Charity Ad…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00282 Published 2024-11-19 No fix listed CWE-79
TI-2024-29615 CVE-2024-44026 · GHSA-r26g-52w2-4hrj

WordPress Charity Addon for Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Charity Addon for Elementor charity-addon-for-elementor allows Stored XSS.This issue affects Charity Addon…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00277 Published 2024-10-06 No fix listed CWE-79