Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: wowdevs Component: Sky Addons For Elementor Clear all filters
TI-2024-10289 CVE-2024-11104 · GHSA-wx82-66wj-jh77

Missing authorization in wowdevs Sky Addons – Elementor Addons with Widgets & Templates

Priority LOW 36

The Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) plugin for WordPress is vulnerable to unauthorized modification of data that can le…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.007 Published 2024-11-22 No fix listed CWE-862
TI-2024-08852 CVE-2024-9542 · GHSA-c2vg-7h9p-v54r

Information disclosure in wowdevs Sky Addons – Elementor Addons with Widgets & Templates

Priority LOW 20

The Sky Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.1 via the render function in modules/content-switcher/widgets/content-switcher.p…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00308 Published 2024-11-21 No fix listed CWE-200
TI-2024-33866 CVE-2024-50433 · GHSA-6qxw-gg6f-98p3

WordPress Sky Addons for Elementor plugin <= 2.5.15 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wowDevs Sky Addons for Elementor sky-elementor-addons allows Cross-Site Scripting (XSS).This issue affects Sky Addons…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00277 Published 2024-10-28 No fix listed CWE-79
TI-2024-31650 CVE-2024-47332 · GHSA-2g6x-pxrf-x3gx

WordPress Sky Addons for Elementor plugin <= 2.5.11 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wowDevs Sky Addons for Elementor sky-elementor-addons allows Stored XSS.This issue affects Sky Addons for Elementor: f…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00277 Published 2024-10-06 No fix listed CWE-79
TI-2024-25922 CVE-2024-38687 · GHSA-wqw5-3mgq-446w

WordPress Sky Addons for Elementor plugin <= 2.5.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wowDevs Sky Addons for Elementor sky-elementor-addons.This issue affects Sky Addons for Elementor: from n/a through <=…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0032 Published 2024-07-20 No fix listed CWE-79
TI-2024-02123 CVE-2024-2286 · GHSA-pv4x-5wmj-f287

Sky Addons for Elementor <= 2.4.0 - Authenticated(Contributor+) Stored Cross-site scripting via Wrapper Link URL

Priority LOW 29

The Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wrapper link URL…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00423 Published 2024-03-13 No fix listed CWE-79