Skip to content
Noroxi

leap13 records

45 published records for vendor leap13.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
26.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 23
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

45 records
  • CVE-2023-37869
    35Monitor

    WordPress Premium Addons PRO plugin <= 2.9.0 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    leap13 · premium addonsJun 19, 2024

  • CVE-2024-56225
    35Monitor

    WordPress Premium Addons for Elementor plugin <= 4.10.56 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    leap13 · premium addons for elementorDec 31, 2024

  • CVE-2023-37868
    26Monitor

    WordPress Premium Addons PRO Plugin <= 2.9.0 is vulnerable to Sensitive Data Exposure

    MediumCVSS 6.5No exploitEPSS 0%

    leap13 · premium addonsNov 30, 2023

  • CVE-2024-31278
    26Monitor

    WordPress Premium Addons for Elementor plugin <= 4.10.22 - Sensitive Data Exposure vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    leap13 · premium addons for elementorApr 10, 2024

  • CVE-2024-0326
    25Monitor

    Premium Addons for Elementor <= 4.10.17 - Authenticated(Contributor+) Stored Cross-Site Scripting via Link Wrapper

    MediumCVSS 6.4No exploitEPSS 0%

    leap13 · premium addons for elementorMar 13, 2024

  • CVE-2024-2665
    25Monitor

    Premium Addons for Elementor <= 4.10.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button

    MediumCVSS 6.4No exploitEPSS 0%

    leap13 · premium addons for elementorApr 10, 2024

  • CVE-2024-2664
    25Monitor

    Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 6.4No exploitEPSS 0%

    leap13 · premium addons for elementorApr 10, 2024

  • CVE-2024-3647
    25Monitor

    Premium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'arrow_style'

    MediumCVSS 6.4No exploitEPSS 0%

    leap13 · premium addons for elementorMay 2, 2024

  • CVE-2024-1242
    25Monitor

    Premium Addons for Elementor <= 4.10.18 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 6.4No exploitEPSS 0%

    leap13 · premium addons for elementorFeb 28, 2024

  • CVE-2023-34012
    24Monitor

    WordPress Premium Addons PRO Plugin <= 2.8.24 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    leap13 · premium addons for elementorJun 23, 2023

  • CVE-2025-14155
    21Monitor

    Premium Addons for Elementor <= 4.11.53 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'get_template_content'

    MediumCVSS 5.3Proof of conceptEPSS 0%

    leap13 · premium addons for elementorDec 23, 2025

  • CVE-2024-0376
    21Monitor

    Premium Addons for Elementor <= 4.10.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link Widget

    MediumCVSS 5.4No exploitEPSS 0%

    leap13 · premium addons for elementorApr 9, 2024

  • CVE-2021-24257
    21Monitor

    Premium Addons for Elementor < 4.2.8 - Contributor+ Stored Cross-Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    leap13 · premium addons for elementorMay 5, 2021

  • CVE-2024-4203
    21Monitor

    Premium Addons for Elementor <= 4.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    leap13 · premium addons for elementorMay 2, 2024

  • CVE-2024-2666
    21Monitor

    Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    leap13 · premium addons for elementorApr 10, 2024

  • CVE-2024-2000
    21Monitor

    Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multi Scroll Widget

    MediumCVSS 5.4No exploitEPSS 0%

    leap13 · premium addonsMar 13, 2024

  • CVE-2024-1680
    21Monitor

    Premium Addons for Elementor <= 4.10.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Banner, Team Members, and Image Scroll Widgets

    MediumCVSS 5.4No exploitEPSS 0%

    leap13 · premium addons for elementorMar 13, 2024

  • CVE-2024-3885
    21Monitor

    Premium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    leap13 · premium addons for elementorMay 2, 2024

  • CVE-2024-2237
    21Monitor

    Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Global Badge Module

    MediumCVSS 5.4No exploitEPSS 0%

    leap13 · premium addonsMar 13, 2024

  • CVE-2024-2238
    21Monitor

    Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Mouse Cursor Module

    MediumCVSS 5.4No exploitEPSS 0%

    leap13 · premium addonsMar 13, 2024

  • CVE-2024-2239
    21Monitor

    Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Premium Magic Scroll Module

    MediumCVSS 5.4No exploitEPSS 0%

    leap13 · premium addonsMar 13, 2024

  • CVE-2024-1997
    21Monitor

    Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Messenger Chat Widget

    MediumCVSS 5.4No exploitEPSS 0%

    leap13 · premium addonsMar 13, 2024

  • CVE-2024-8681
    21Monitor

    Premium Addons for Elementor <= 4.10.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Media Grid Widget

    MediumCVSS 5.4No exploitEPSS 0%

    leap13 · premium addons for elementorSep 27, 2024

  • CVE-2024-2399
    21Monitor

    Premium Addons for Elementor <= 4.10.23 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    leap13 · premium addons for elementorMar 15, 2024

  • CVE-2024-1996
    21Monitor

    Premium Addons for Elementor PRO <= 2.9.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget link

    MediumCVSS 5.4No exploitEPSS 0%

    leap13 · premium addonsMar 13, 2024