Skip to content
Noroxi

master-addons records

17 published records for vendor master-addons.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
35.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 24
  2. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

17 records
  • CVE-2024-35660
    39Monitor

    WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Broken Access Control on API vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    master-addons · master addonsJun 9, 2024

  • CVE-2024-33595
    35Monitor

    WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Broken Access Control on Duplicate Post vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    master-addons · master addonsApr 29, 2024

  • CVE-2024-5542
    24Monitor

    Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to Unauthenticated Stored Cross-Sit

    MediumCVSS 6.1No exploitEPSS 0%

    master-addons · master addonsJun 7, 2024

  • CVE-2024-4265
    21Monitor

    Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.5.9 - Contributor+ Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 1%

    master-addons · master addonsMay 2, 2024

  • CVE-2024-9502
    21Monitor

    Master Addons -- Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    master-addons · master addonsJan 7, 2025

  • CVE-2024-9618
    21Monitor

    Master Addons <= 2.0.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

    MediumCVSS 5.4No exploitEPSS 0%

    master-addons · master addonsMar 4, 2025

  • CVE-2024-29911
    21Monitor

    WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    master-addons · master addonsMar 27, 2024

  • CVE-2024-2139
    21Monitor

    Master Addons for Elementor <= 2.0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget

    MediumCVSS 5.4No exploitEPSS 0%

    master-addons · master addonsMar 26, 2024

  • CVE-2024-5162
    21Monitor

    WordPress prettyPhoto <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter

    MediumCVSS 5.4No exploitEPSS 0%

    master-addons · prettyphotoJun 6, 2024

  • CVE-2024-4580
    21Monitor

    Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    master-addons · master addonsMay 16, 2024

  • CVE-2024-6282
    21Monitor

    Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    master-addons · master addonsSep 10, 2024

  • CVE-2024-5382
    21Monitor

    Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to MA Template Creation or Modifica

    MediumCVSS 5.3No exploitEPSS 0%

    master-addons · master addonsJun 7, 2024

  • CVE-2025-0433
    21Monitor

    Master Addons <= 2.0.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

    MediumCVSS 5.4No exploitEPSS 0%

    master-addons · master addonsMar 4, 2025

  • CVE-2024-35688
    21Monitor

    WordPress Master Addons for Elementor plugin <= 2.0.5.9 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    master-addons · master addonsJun 8, 2024

  • CVE-2024-3134
    21Monitor

    Master Addons for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    master-addons · master addonsMay 16, 2024

  • CVE-2024-35702
    21Monitor

    WordPress Master Addons for Elementor plugin <= 2.0.6.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    master-addons · master addonsJun 8, 2024

  • CVE-2024-38710
    19Monitor

    WordPress Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin <= 2.0.6.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 0%

    master-addons · master addonsJul 20, 2024