Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: The Plus Addons for Elementor - Pro 5.0.4*, 5.0.7 Clear all filters
TI-2021-07228 CVE-2021-24949 · GHSA-v3v5-vxq9-f53h

The Plus Addons for Elementor Pro < 5.0.7 - Unauthenticated SQL Injection

Priority MEDIUM 46

The "WP Search Filters" widget of The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not sanitise and escape the option parameter before using it in a SQL statement, which could lead to SQL injection

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0176 Published 2022-01-10 Fixed in 5.0.7 CWE-89
TI-2021-07227 CVE-2021-24948 · GHSA-wfmm-h8r7-5hhf

The Plus Addons for Elementor Pro < 5.0.7 - Sensitive Data Disclosure

Priority LOW 37

The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not validate the qvquery parameter of the tp_get_dl_post_info_ajax AJAX action, which could allow unauthenticated users to retrieve sensitive informa…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01875 Published 2022-01-10 Fixed in 5.0.7 CWE-200