Vulnerabilities

TI-2024-05366 CVE-2024-5787 · GHSA-rh85-pc3c-hh43

Cross-site scripting in ideaboxcreations PowerPack Addons for Elementor

LOW 29

The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' attribute within the plugin's Link Effects widget in all version…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00401 Published 2024-06-13 No fix listed CWE-79

TI-2024-03422 CVE-2024-3668 · GHSA-236g-v823-mwh3

PowerPack Pro for Elementor <= 2.10.17 - Authenticated (Contributor+) Privilege Escalation

LOW 38

The PowerPack Pro for Elementor plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.10.17.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00431 Published 2024-06-08 No fix listed CWE-732

TI-2024-04946 CVE-2024-5327

Cross-site scripting in ideaboxcreations PowerPack Addons for Elementor

LOW 28

The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘pp_animated_gradient_bg_color’ parameter in all versions up…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00322 Published 2024-05-30 No fix listed CWE-79

TI-2024-02318 CVE-2024-2492 · GHSA-4wcf-973m-cwfg

Cross-site scripting in ideaboxcreations PowerPack Addons for Elementor

LOW 28

The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Twitter Tweet widget in all versions up to, and including, 2.7.18 due to insufficient input sanitization and ou…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0036 Published 2024-04-09 No fix listed CWE-79

TI-2024-02317 CVE-2024-2491 · GHSA-7j97-wg47-fmcm

PowerPack Addons for Elementor <= 2.7.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via _html_tag

LOW 28

The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the *_html_tag* attribute of multiple widgets in all versions up to, and including, 2.7.17 due to insufficient inpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0034 Published 2024-03-30 No fix listed CWE-79

TI-2024-01318 CVE-2024-1411 · GHSA-j4rr-p24q-x2wv

Cross-site scripting in ideaboxcreations PowerPack Addons for Elementor

LOW 29

The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the settings of the Twitter Buttons Widget in all versions up to, and including, 2.7.15 due to insufficient input s…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00423 Published 2024-02-20 No fix listed CWE-79

TI-2024-00976 CVE-2024-1055 · GHSA-6gg6-4gm5-vqq7

Cross-site scripting in ideaboxcreations PowerPack Addons for Elementor

LOW 25

The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's buttons in all versions up to, and including, 2.7.14 due to i…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00419 Published 2024-02-07 No fix listed CWE-79

TI-2023-06385 CVE-2023-6984 · GHSA-rj85-r62x-rwp3

PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.13 - Cross-Site Request Forgery

LOW 29

The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.13.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00196 Published 2024-01-03 No fix listed CWE-352

TI-2023-27149 CVE-2023-49739 · GHSA-8xhg-wqv3-qqf5

WordPress PowerPack Pro for Elementor plugin <= 2.9.23 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Vulnerability in IdeaBox Creations PowerPack Pro for Elementor.This issue affects PowerPack Pro for Elementor: from n/a through 2.9.23.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00416 Published 2023-12-14 No fix listed

TI-2021-07305 CVE-2021-25027 · GHSA-qp2m-gjjj-46gx

PowerPack Addons for Elementor < 2.6.2 - Reflected Cross-Site Scripting

LOW 29

The PowerPack Addons for Elementor WordPress plugin before 2.6.2 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting issue

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2022-01-03 Fixed in 2.6.2 CWE-79

TI-2021-06555 CVE-2021-24263 · GHSA-hg47-m38x-5m72

PowerPack Addons for Elementor < 2.3.2 - Contributor+ Stored XSS

LOW 26

The “Elementor Addons – PowerPack Addons for Elementor” WordPress Plugin before 2.3.2 for WordPress has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contribut…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00663 Published 2021-05-05 Fixed in 2.3.2 CWE-79

Vulnerabilities

Filters