Vulnerabilities

TI-2024-12834 CVE-2024-13808 · GHSA-c824-5258-vggv

Xpro Elementor Addons - Pro <= 1.4.9 - Authenticated (Contributor+) Remote Code Execution

MEDIUM 42

The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.9 via the custom PHP widget.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00804 Published 2025-04-26 No fix listed CWE-94

TI-2024-12688 CVE-2024-13649 · GHSA-c953-29r8-rq6h

140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 1.4.6.7 due to insufficient input sanitizati…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00274 Published 2025-03-08 No fix listed CWE-79

TI-2024-11676 CVE-2024-12584 · GHSA-9pcx-8wcv-8m4v

Information disclosure in Xpro Addons — 140+ Widgets for Elementor

LOW 29

The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6.2 via the 'duplicate' function.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00367 Published 2025-01-08 No fix listed CWE-200

TI-2024-36342 CVE-2024-54253 · GHSA-vrx9-xvm5-2pqp

WordPress Xpro Addons For Elementor plugin <= 1.4.6.5 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons.This issue affects Xpro Elementor Addons: from n/a through <= 1.4.6.5…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00351 Published 2024-12-09 No fix listed CWE-79

TI-2024-09560 CVE-2024-10319 · GHSA-5j48-7c68-hg4f

Information disclosure in Xpro Addons — 140+ Widgets for Elementor

LOW 20

The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6 via the render function in widgets/content-toggle/layou…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00344 Published 2024-11-05 No fix listed CWE-200

TI-2024-07223 CVE-2024-7791 · GHSA-8jcj-v53m-3592

Cross-site scripting in Xpro Addons — 140+ Widgets for Elementor

LOW 28

The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘arrow’ parameter within the Post Grid widget in all versions up to, and including, 1.4.4.3 du…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00329 Published 2024-08-27 No fix listed CWE-79

TI-2024-28821 CVE-2024-43150 · GHSA-px5h-8vph-x647

WordPress Xpro Elementor Addons plugin <= 1.4.4.2 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons allows Stored XSS.This issue affects Xpro Elementor Addons: from n/a through 1.4.4.2…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0026 Published 2024-08-12 No fix listed CWE-79

TI-2024-22872 CVE-2024-34570 · GHSA-9w2f-jxpx-pgrg

WordPress Xpro Elementor Addons plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons allows Stored XSS.This issue affects Xpro Elementor Addons: from n/a through 1.4.3.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00276 Published 2024-05-08 No fix listed CWE-79

Vulnerabilities

Filters