Vulnerabilities

TI-2024-11238 CVE-2024-12116 · GHSA-p6wv-4rvr-m4fh

Unlimited Theme Addon For Elementor and WooCommerce <= 1.2.2 - Authenticated (Contributor+) Post Disclosure

LOW 20

The Unlimited Theme Addon For Elementor and WooCommerce plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.2 via the 'uta-template' shortcode due to insufficient restrict…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00443 Published 2025-01-11 No fix listed CWE-639

TI-2024-10435 CVE-2024-11265 · GHSA-h8mx-mg54-ppww

Wp Maximum Upload File Size <= 1.1.3 - Authenticated (Author+) Full Path Disclosure

LOW 21

The Increase Maximum Upload File Size | Increase Execution Time plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.1.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00614 Published 2024-11-23 No fix listed CWE-200

Vulnerabilities

Filters

Unlimited Theme Addon For Elementor and WooCommerce <= 1.2.2 - Authenticated (Contributor+) Post Disclosure

Wp Maximum Upload File Size <= 1.1.3 - Authenticated (Author+) Full Path Disclosure