Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: codersaiful Component: Ultraaddons Clear all filters
TI-2024-09911 CVE-2024-10696 · GHSA-v3wg-jg3p-qcmh

Authorization bypass in codersaiful UltraAddons for Elementor

Priority LOW 21

The UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all ver…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00497 Published 2024-11-21 No fix listed CWE-639
TI-2024-04524 CVE-2024-4866 · GHSA-rfhq-9xcp-7phj

Cross-site scripting in codersaiful UltraAddons for Elementor

Priority LOW 28

The UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple wi…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00363 Published 2024-07-10 No fix listed CWE-79
TI-2024-25054 CVE-2024-37554 · GHSA-cv34-mcg3-r6xv

WordPress UltraAddons plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saiful Islam UltraAddons Elementor Lite ultraaddons-elementor-lite allows DOM-Based XSS.This issue affects UltraAddons…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0024 Published 2024-07-06 No fix listed CWE-79