Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Apollo13Themes Component: Rife Elementor Extensions & Templates Clear all filters
TI-2024-05115 CVE-2024-5504 · GHSA-f4qq-f5qf-jfp5

Cross-site scripting in Apollo13Themes Rife Extensions & Templates for Elementor

Priority LOW 28

The Rife Elementor Extensions & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag' attribute within the plugin's Writing Effect Headline widget in all versions up to, and including,…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00349 Published 2024-07-02 No fix listed CWE-79
TI-2021-06557 CVE-2021-24265 · GHSA-77fx-cf5m-g7h3

Rife Elementor Extensions & Templates < 1.1.6 - Contributor+ Stored XSS

Priority LOW 25

The “Rife Elementor Extensions & Templates” WordPress Plugin before 1.1.6 has a widget that is vulnerable to stored Cross-Site Scripting(XSS) by lower-privileged users such as contributors, all via a similar method.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00556 Published 2021-05-05 Fixed in 1.1.6 CWE-79