Skip to content
Noroxi

nicheaddons records

20 published records for vendor nicheaddons.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
60%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

20 records
  • CVE-2023-47826
    39Monitor

    WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.3 - Broken Access Control vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    nicheaddons · restaurant \& cafe addon for elementorDec 9, 2024

  • CVE-2023-47827
    30Monitor

    WordPress Events Addon for Elementor Plugin <= 2.1.3 is vulnerable to Broken Access Control

    HighCVSS 7.5No exploitEPSS 0%

    nicheaddons · events addon for elementorNov 30, 2023

  • CVE-2024-5229
    25Monitor

    Primary Addon for Elementor <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget

    MediumCVSS 6.4No exploitEPSS 0%

    nicheaddons · primary addon for elementorMay 24, 2024

  • CVE-2024-54316
    21Monitor

    WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.8 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    nicheaddons · restaurant \& cafe addon for elementorDec 13, 2024

  • CVE-2024-54314
    21Monitor

    WordPress Primary Addon for Elementor plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    nicheaddons · primary addon for elementorDec 13, 2024

  • CVE-2024-54315
    21Monitor

    WordPress Events Addon for Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    nicheaddons · events addon for elementorDec 13, 2024

  • CVE-2024-4669
    21Monitor

    Events Addon for Elementor <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

    MediumCVSS 5.4No exploitEPSS 0%

    nicheaddons · events addon for elementorJun 11, 2024

  • CVE-2024-44032
    21Monitor

    WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    nicheaddons · restaurant \& cafe addon for elementorOct 6, 2024

  • CVE-2024-44033
    21Monitor

    WordPress Primary Addon for Elementor plugin <= 1.5.7 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    nicheaddons · primary addon for elementorOct 6, 2024

  • CVE-2024-51938
    21Monitor

    WordPress Charity Addon for Elementor plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    nicheaddons · charity addon for elementorNov 19, 2024

  • CVE-2024-44026
    21Monitor

    WordPress Charity Addon for Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    nicheaddons · charity addon for elementorOct 6, 2024

  • CVE-2024-49259
    21Monitor

    WordPress Primary Addon for Elementor plugin <= 1.5.8 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    nicheaddons · primary addon for elementorOct 17, 2024

  • CVE-2024-51581
    21Monitor

    WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    nicheaddons · restaurant \& cafe addon for elementorNov 10, 2024

  • CVE-2024-51585
    21Monitor

    WordPress Sales Page Addon plugin <= 1.4.5 - Stored Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    nicheaddons · sales page addonNov 9, 2024

  • CVE-2024-49264
    21Monitor

    WordPress Events Addon for Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    nicheaddons · events addon for elementorOct 17, 2024

  • CVE-2024-10780
    17Monitor

    Restaurant & Cafe Addon for Elementor <= 1.5.9 - Authenticated (Contributor+) Post Disclosure

    MediumCVSS 4.3No exploitEPSS 0%

    nicheaddons · restaurant \& cafe addon for elementorNov 28, 2024

  • CVE-2024-12061
    17Monitor

    Events Addon for Elementor <= 2.2.3 - Authenticated (Contributor+) Post Disclosure

    MediumCVSS 4.3No exploitEPSS 0%

    nicheaddons · events addon for elementorDec 18, 2024

  • CVE-2024-10670
    17Monitor

    Primary Addon for Elementor <= 1.6.2 - Authenticated (Contributor+) Post Disclosure

    MediumCVSS 4.3No exploitEPSS 0%

    nicheaddons · primary addon for elementorNov 28, 2024

  • CVE-2024-13854
    17Monitor

    Education Addon for Elementor <= 1.3.1 - Authenticated (Contributor+) Insecure Direct Object Reference via naedu_elementor_template Shortcode

    MediumCVSS 4.3No exploitEPSS 0%

    nicheaddons · education addonFeb 19, 2025

  • CVE-2024-12062
    17Monitor

    Charity Addon for Elementor <= 1.3.3 - Authenticated (Contributor+) Post Disclosure

    MediumCVSS 4.3No exploitEPSS 0%

    nicheaddons · charity addon for elementorDec 3, 2024