Vulnerabilities

TI-2024-24619 CVE-2024-37090 · GHSA-p38f-rq68-j3c6

SQL Injection vulnerability in multiple StylemixThemes premium themes

LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Masterstudy Elementor Widgets, StylemixThemes Consulting Elementor Widgets.This issue affects Masterstu…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0053 Published 2024-07-09 No fix listed CWE-89

TI-2024-24621 CVE-2024-37092 · GHSA-q9g9-936x-ff5x

WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Local File Inclusion vulnerability

MEDIUM 41

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP Local File Inclusion.This issue affects Consulting Elementor Widgets:…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00525 Published 2024-06-24 No fix listed CWE-22

TI-2024-24620 CVE-2024-37091 · GHSA-9cp8-pr92-vg9q

WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Remote Code Execution (RCE) vulnerability

HIGH 82

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in StylemixThemes Consulting Elementor Widgets, StylemixThemes Masterstudy Elementor Widgets allows OS Command Injection.T…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01243 Published 2024-06-24 No fix listed CWE-77

TI-2024-24618 CVE-2024-37089 · GHSA-c99m-hj8j-vpx5

WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Unauthenticated Local File Inclusion vulnerability

HIGH 76