Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Liton Arefin Clear all filters
TI-2026-24990 CVE-2026-32462 · GHSA-wmhj-8382-jc9f

WordPress Master Addons for Elementor plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liton Arefin Master Addons for Elementor master-addons allows DOM-Based XSS.This issue affects Master Addons for Eleme…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0021 Published 2026-03-13 No fix listed CWE-79
TI-2024-35058 CVE-2024-52387 · GHSA-4pmf-68jr-9pq2

WordPress Master Addons plugin <= 2.0.9.9.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liton Arefin Master Addons for Elementor master-addons allows Stored XSS.This issue affects Master Addons for Elemento…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00259 Published 2026-02-20 No fix listed CWE-79
TI-2025-39201 CVE-2025-63053 · GHSA-56rf-v7jx-hxgf

WordPress Master Addons for Elementor plugin <= 2.0.9.9.4 - Insecure Direct Object References (IDOR) vulnerability

Priority LOW 30

Authorization Bypass Through User-Controlled Key vulnerability in Liton Arefin Master Addons for Elementor master-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Master A…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00241 Published 2025-12-31 No fix listed CWE-639
TI-2025-42114 CVE-2025-68593 · GHSA-82m7-4386-5w76

WordPress WP Adminify plugin <= 4.0.6.1 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in Liton Arefin WP Adminify adminify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Adminify: from n/a through <= 4.0.6.1.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00248 Published 2025-12-24 No fix listed CWE-862
TI-2025-42113 CVE-2025-68592 · GHSA-6mmw-6jqx-8w6x

WordPress WP Adminify plugin <= 4.0.6.1 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Liton Arefin WP Adminify adminify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Adminify: from n/a through <= 4.0.6.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00234 Published 2025-12-24 No fix listed CWE-862
TI-2025-39203 CVE-2025-63055 · GHSA-g3r9-25f9-622c

WordPress Master Addons for Elementor plugin <= 2.0.9.9.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liton Arefin Master Addons for Elementor master-addons allows Stored XSS.This issue affects Master Addons for Elemento…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00196 Published 2025-12-09 No fix listed CWE-79
TI-2025-16227 CVE-2025-22323 · GHSA-mf6r-39pm-fg5j

WordPress Image Hover Effects for Elementor plugin <= 1.0.2.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liton Arefin Image Hover Effects for Elementor image-hover-effects-elementor-addon allows Stored XSS.This issue affect…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00223 Published 2025-01-07 No fix listed CWE-79