webtechstreet records
25 published records for vendor webtechstreet.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 16%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')18
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-862 Missing Authorization2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-359 Exposure of Private Personal Information to an Unauthorized Actor1
The weakness classes this vendor ships most often: where to look.
CWEAll records
25 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2024-47361No exploit | WordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerabilitywebtechstreet · elementor addon elements · CWE-862 | High8.8 | — | 0.4% | Nov 1, 2024 |
26Monitor | CVE-2024-1358No exploit | Elementor Addon Elements <= 1.12.12 - Directory Traversal to Local File Inclusionwebtechstreet · elementor addon elements · CWE-22 | Medium6.5 | — | 1.2% | Mar 13, 2024 |
25Monitor | CVE-2024-2792No exploit | Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Text Separator' and 'Image Compare' Widgetwebtechstreet · elementor addon elements · CWE-79 | Medium6.4 | — | 0.5% | Apr 9, 2024 |
21Monitor | CVE-2023-4723No exploit | Elementor Addon Elements <= 1.12.7 - Missing Authorization to Sensitive Information Exposurewebtechstreet · elementor addon elements · CWE-862 | Medium5.3 | — | 0.9% | Nov 15, 2023 |
21Monitor | CVE-2021-24259No exploit | Elementor Addon Elements < 1.11.2 - Contributor+ Stored XSSwebtechstreet · elementor addon elements · CWE-79 | Medium5.4 | — | 0.6% | May 5, 2021 |
21Monitor | CVE-2024-3743No exploit | Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingwebtechstreet · elementor addon elements · CWE-79 | Medium5.4 | — | 0.6% | May 2, 2024 |
21Monitor | CVE-2024-0834No exploit | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link_to parameter in all versions up webtechstreet · elementor addon elements · CWE-79 | Medium5.4 | — | 0.5% | Feb 5, 2024 |
21Monitor | CVE-2024-1392No exploit | Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dual Button Widgetwebtechstreet · elementor addon elements · CWE-79 | Medium5.4 | — | 0.5% | Mar 13, 2024 |
21Monitor | CVE-2024-1391No exploit | Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Thumbnail Slider Widgetwebtechstreet · elementor addon elements · CWE-79 | Medium5.4 | — | 0.5% | Mar 13, 2024 |
21Monitor | CVE-2024-1393No exploit | Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Switcher Widgetwebtechstreet · elementor addon elements · CWE-79 | Medium5.4 | — | 0.5% | Mar 13, 2024 |
21Monitor | CVE-2024-1422No exploit | Elementor Addon Elements <= 1.12.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Modal Popup effetwebtechstreet · elementor addon elements · CWE-79 | Medium5.4 | — | 0.5% | Mar 13, 2024 |
21Monitor | CVE-2024-7122No exploit | Elementor Addon Elements <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgetswebtechstreet · elementor addon elements · CWE-79 | Medium5.4 | — | 0.4% | Aug 30, 2024 |
21Monitor | CVE-2024-4569No exploit | Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scriptingwebtechstreet · elementor addon elements · CWE-79 | Medium5.4 | — | 0.4% | Jun 27, 2024 |
21Monitor | CVE-2024-30422No exploit | WordPress Elementor Addon Elements plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerabilitywebtechstreet · elementor addon elements · CWE-79 | Medium5.4 | — | 0.3% | Mar 28, 2024 |
21Monitor | CVE-2024-4401No exploit | Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and eae_slider_animation Parameterswebtechstreet · elementor addon elements · CWE-79 | Medium5.4 | — | 0.3% | Aug 30, 2024 |
21Monitor | CVE-2024-2092No exploit | Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widgetwebtechstreet · elementor addon elements · CWE-79 | Medium5.4 | — | 0.3% | Jun 12, 2024 |
21Monitor | CVE-2024-4570No exploit | Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scriptingwebtechstreet · elementor addon elements · CWE-79 | Medium5.4 | — | 0.3% | Jun 27, 2024 |
21Monitor | CVE-2024-29107No exploit | WordPress Elementor Addon Elements plugin <= 1.12.10 - Cross Site Scripting (XSS) vulnerabilitywebtechstreet · elementor addon elements · CWE-79 | Medium5.4 | — | 0.3% | Mar 19, 2024 |
21Monitor | CVE-2024-47366No exploit | WordPress Elementor Addon Elements plugin <= 1.13.6 - Cross Site Scripting (XSS) vulnerabilitywebtechstreet · elementor addon elements · CWE-79 | Medium5.4 | — | 0.3% | Oct 6, 2024 |
19Monitor | CVE-2023-5381No exploit | Elementor Addon Elements <= 1.12.7 - Authenticated (Administrator+) Stored Cross-Site Scriptingwebtechstreet · elementor addon elements · CWE-79 | Medium4.8 | — | 0.5% | Nov 15, 2023 |
18Monitor | CVE-2024-2091No exploit | Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingwebtechstreet · elementor addon elements · CWE-79 | Medium4.6 | — | 0.5% | Mar 27, 2024 |
17Monitor | CVE-2024-13215No exploit | Elementor Addon Elements <= 1.13.10 - Authenticated (Contributor+) Sensitive Information Exposure via Modal Popupwebtechstreet · elementor addon elements · CWE-359 | Medium4.3 | — | 0.5% | Jan 15, 2025 |
17Monitor | CVE-2024-8902No exploit | Elementor Addon Elements <= 1.13.8 - Authenticated (Contributor+) Sensitive Information Exposure via table_saved_sectionswebtechstreet · elementor addon elements · CWE-200 | Medium4.3 | — | 0.4% | Oct 12, 2024 |
17Monitor | CVE-2023-4690No exploit | Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgerywebtechstreet · elementor addon elements · CWE-352 | Medium4.3 | — | 0.3% | Nov 15, 2023 |
17Monitor | CVE-2023-4689No exploit | Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgerywebtechstreet · elementor addon elements · CWE-352 | Medium4.3 | — | 0.3% | Nov 15, 2023 |
- CVE-2024-4736135Monitor
WordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerability
HighCVSS 8.8No exploitEPSS 0%webtechstreet · elementor addon elementsNov 1, 2024
- CVE-2024-135826Monitor
Elementor Addon Elements <= 1.12.12 - Directory Traversal to Local File Inclusion
MediumCVSS 6.5No exploitEPSS 1%webtechstreet · elementor addon elementsMar 13, 2024
- CVE-2024-279225Monitor
Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Text Separator' and 'Image Compare' Widget
MediumCVSS 6.4No exploitEPSS 0%webtechstreet · elementor addon elementsApr 9, 2024
- CVE-2023-472321Monitor
Elementor Addon Elements <= 1.12.7 - Missing Authorization to Sensitive Information Exposure
MediumCVSS 5.3No exploitEPSS 1%webtechstreet · elementor addon elementsNov 15, 2023
- CVE-2021-2425921Monitor
Elementor Addon Elements < 1.11.2 - Contributor+ Stored XSS
MediumCVSS 5.4No exploitEPSS 1%webtechstreet · elementor addon elementsMay 5, 2021
- CVE-2024-374321Monitor
Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 1%webtechstreet · elementor addon elementsMay 2, 2024
- CVE-2024-083421Monitor
The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link_to parameter in all versions up
MediumCVSS 5.4No exploitEPSS 1%webtechstreet · elementor addon elementsFeb 5, 2024
- CVE-2024-139221Monitor
Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dual Button Widget
MediumCVSS 5.4No exploitEPSS 1%webtechstreet · elementor addon elementsMar 13, 2024
- CVE-2024-139121Monitor
Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Thumbnail Slider Widget
MediumCVSS 5.4No exploitEPSS 1%webtechstreet · elementor addon elementsMar 13, 2024
- CVE-2024-139321Monitor
Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Switcher Widget
MediumCVSS 5.4No exploitEPSS 1%webtechstreet · elementor addon elementsMar 13, 2024
- CVE-2024-142221Monitor
Elementor Addon Elements <= 1.12.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Modal Popup effet
MediumCVSS 5.4No exploitEPSS 1%webtechstreet · elementor addon elementsMar 13, 2024
- CVE-2024-712221Monitor
Elementor Addon Elements <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
MediumCVSS 5.4No exploitEPSS 0%webtechstreet · elementor addon elementsAug 30, 2024
- CVE-2024-456921Monitor
Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%webtechstreet · elementor addon elementsJun 27, 2024
- CVE-2024-3042221Monitor
WordPress Elementor Addon Elements plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%webtechstreet · elementor addon elementsMar 28, 2024
- CVE-2024-440121Monitor
Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and eae_slider_animation Parameters
MediumCVSS 5.4No exploitEPSS 0%webtechstreet · elementor addon elementsAug 30, 2024
- CVE-2024-209221Monitor
Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widget
MediumCVSS 5.4No exploitEPSS 0%webtechstreet · elementor addon elementsJun 12, 2024
- CVE-2024-457021Monitor
Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%webtechstreet · elementor addon elementsJun 27, 2024
- CVE-2024-2910721Monitor
WordPress Elementor Addon Elements plugin <= 1.12.10 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%webtechstreet · elementor addon elementsMar 19, 2024
- CVE-2024-4736621Monitor
WordPress Elementor Addon Elements plugin <= 1.13.6 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%webtechstreet · elementor addon elementsOct 6, 2024
- CVE-2023-538119Monitor
Elementor Addon Elements <= 1.12.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
MediumCVSS 4.8No exploitEPSS 0%webtechstreet · elementor addon elementsNov 15, 2023
- CVE-2024-209118Monitor
Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 4.6No exploitEPSS 1%webtechstreet · elementor addon elementsMar 27, 2024
- CVE-2024-1321517Monitor
Elementor Addon Elements <= 1.13.10 - Authenticated (Contributor+) Sensitive Information Exposure via Modal Popup
MediumCVSS 4.3No exploitEPSS 1%webtechstreet · elementor addon elementsJan 15, 2025
- CVE-2024-890217Monitor
Elementor Addon Elements <= 1.13.8 - Authenticated (Contributor+) Sensitive Information Exposure via table_saved_sections
MediumCVSS 4.3No exploitEPSS 0%webtechstreet · elementor addon elementsOct 12, 2024
- CVE-2023-469017Monitor
Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery
MediumCVSS 4.3No exploitEPSS 0%webtechstreet · elementor addon elementsNov 15, 2023
- CVE-2023-468917Monitor
Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery
MediumCVSS 4.3No exploitEPSS 0%webtechstreet · elementor addon elementsNov 15, 2023