Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: G5plus Component: Ultimate Bootstrap Elements For Elementor Clear all filters
TI-2024-09569 CVE-2024-10329 · GHSA-88m6-45c8-3f97

Ultimate Bootstrap Elements for Elementor <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure

Priority LOW 20

The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6 via the 'ube_get_page_templates' function.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00414 Published 2024-11-05 No fix listed CWE-200
TI-2024-28811 CVE-2024-43140 · GHSA-xf46-hjp6-hxpp

WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.4 - Local File Inclusion vulnerability

Priority MEDIUM 41

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in G5Theme Ultimate Bootstrap Elements for Elementor allows PHP Local File Inclusion.This issue affects Ultimate Bootstrap Elem…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00582 Published 2024-08-13 No fix listed CWE-22
TI-2024-24966 CVE-2024-37462 · GHSA-66x4-xvv2-2j4j

WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.2 - Local File Inclusion vulnerability

Priority HIGH 73

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in G5Theme Ultimate Bootstrap Elements for Elementor allows Path Traversal.This issue affects Ultimate Bootstrap Elements for E…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00575 Published 2024-07-09 No fix listed CWE-22
TI-2024-01982 CVE-2024-2132 · GHSA-9c5h-gfrp-34v7

Cross-site scripting in g5theme Ultimate Bootstrap Elements for Elementor

Priority LOW 28

The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Widget in all versions up to, and including, 1.4.0 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0032 Published 2024-04-06 No fix listed CWE-79
TI-2024-01305 CVE-2024-1398 · GHSA-cj2v-p5xc-w33f

Ultimate Bootstrap Elements for Elementor <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 29

The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘heading_title_tag’ and ’heading_sub_title_tag’ parameters in all versions up to, and including, 1.3…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00506 Published 2024-03-02 No fix listed CWE-79