Skip to content
Noroxi

IdeaBox records

19 published records for vendor ideabox.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
31.6%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 22
  3. 23
  4. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

19 records
  • CVE-2024-39634
    35Monitor

    WordPress PowerPack Pro for Elementor plugin <= 2.10.14 - Contributor+ Privilege Escalation vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    ideabox · powerpack pro for elementorAug 1, 2024

  • CVE-2024-3668
    35Monitor

    PowerPack Pro for Elementor <= 2.10.17 - Authenticated (Contributor+) Privilege Escalation

    HighCVSS 8.8No exploitEPSS 0%

    ideabox · powerpack addons for elementorJun 8, 2024

  • CVE-2024-39633
    35Monitor

    WordPress PowerPack for Beaver Builder plugin <= 2.33.0 - Contributor+ Privilege Escalation vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    ideabox · powerpack for beaver builderAug 1, 2024

  • CVE-2024-37410
    28Monitor

    WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.3 - Local File Inclusion vulnerability

    HighCVSS 7.2No exploitEPSS 1%

    ideabox · powerpack for beaver builderJul 9, 2024

  • CVE-2021-25027
    24Monitor

    PowerPack Addons for Elementor < 2.6.2 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 1%

    ideabox · powerpack addons for elementorJan 3, 2022

  • CVE-2022-0176
    24Monitor

    PowerPack Lite for Beaver Builder < 1.2.9.3 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 1%

    ideabox · powerpack for beaver builderFeb 14, 2022

  • CVE-2023-49739
    24Monitor

    WordPress PowerPack Pro for Elementor plugin <= 2.9.23 - Reflected Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    ideabox · powerpack addons for elementorDec 14, 2023

  • CVE-2024-12239
    24Monitor

    PowerPack Lite for Beaver Builder <= 1.3.0.5 - Reflected Cross-Site Scripting via Navigate Parameter

    MediumCVSS 6.1No exploitEPSS 0%

    ideabox · powerpack for beaver builderDec 16, 2024

  • CVE-2024-43330
    24Monitor

    WordPress PowerPack for Beaver Builder plugin < 2.37.4 - Reflected Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    ideabox · powerpack for beaver builderAug 18, 2024

  • CVE-2021-24263
    21Monitor

    PowerPack Addons for Elementor < 2.3.2 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 1%

    ideabox · powerpack addons for elementorMay 5, 2021

  • CVE-2024-1411
    21Monitor

    PowerPack Addons for Elementor <= 2.7.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Buttons Widget

    MediumCVSS 5.4No exploitEPSS 0%

    ideabox · powerpack addons for elementorFeb 28, 2024

  • CVE-2024-1055
    21Monitor

    PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    ideabox · powerpack addons for elementorFeb 7, 2024

  • CVE-2024-5787
    21Monitor

    PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Effects Wi

    MediumCVSS 5.4No exploitEPSS 0%

    ideabox · powerpack addons for elementorJun 13, 2024

  • CVE-2024-2492
    21Monitor

    PowerPack Addons for Elementor <= 2.7.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Tweet Widget

    MediumCVSS 5.4No exploitEPSS 0%

    ideabox · powerpack addons for elementorApr 9, 2024

  • CVE-2024-2491
    21Monitor

    PowerPack Addons for Elementor <= 2.7.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via *_html_tag*

    MediumCVSS 5.4No exploitEPSS 0%

    ideabox · powerpack addons for elementorMar 30, 2024

  • CVE-2024-2289
    21Monitor

    PowerPack Lite for Beaver Builder <= 1.3.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via element link

    MediumCVSS 5.4No exploitEPSS 0%

    ideabox · powerpack for beaver builderApr 9, 2024

  • CVE-2024-5327
    21Monitor

    PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    ideabox · powerpack addons for elementorMay 30, 2024

  • CVE-2024-37409
    21Monitor

    WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.4 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    ideabox · powerpack for beaver builderJul 22, 2024

  • CVE-2023-6984
    17Monitor

    PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.13 - Cross-Site Request Forgery

    MediumCVSS 4.3No exploitEPSS 0%

    ideabox · powerpack addons for elementorJan 3, 2024