Vulnerabilities

TI-2025-13350 CVE-2025-14610 · GHSA-vpjf-q5q9-w837

TableMaster for Elementor <= 1.3.6 - Authenticated (Author+) Server-Side Request Forgery via 'csv_url' Parameter

LOW 37

The TableMaster for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.6.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00315 Published 2026-01-28 No fix listed CWE-918

TI-2024-21819 CVE-2024-32952 · GHSA-2xv4-c698-3v42

WordPress Max Addons Pro for Bricks plugin <= 1.6.1 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BloomPixel Max Addons Pro for Bricks allows Reflected XSS.This issue affects Max Addons Pro for Bricks: from n/a throu…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00354 Published 2024-04-24 No fix listed CWE-79

TI-2024-21818 CVE-2024-32951 · GHSA-qmwq-3v58-9xp9

WordPress Max Addons Pro for Bricks plugin <= 1.6.1 - Unauthenticated Plugin Settings Reset vulnerability

LOW 35

Missing Authorization vulnerability in BloomPixel Max Addons Pro for Bricks.This issue affects Max Addons Pro for Bricks: from n/a through 1.6.1.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00438 Published 2024-04-24 No fix listed CWE-862

Vulnerabilities

Filters

TableMaster for Elementor <= 1.3.6 - Authenticated (Author+) Server-Side Request Forgery via 'csv_url' Parameter

WordPress Max Addons Pro for Bricks plugin <= 1.6.1 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Max Addons Pro for Bricks plugin <= 1.6.1 - Unauthenticated Plugin Settings Reset vulnerability