Addon Elements for Elementor (formerly Elementor Addon Elements)

Güvenlik açıkları

• CVE-2024-47361giriş gerekir≤ 1.13.6

  WordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerability

  Yüksek 8.8

• CVE-2026-28131giriş gerekir≤ 1.14.4

  WordPress Elementor Addon Elements plugin <= 1.14.4 - Sensitive Data Exposure vulnerability

  Orta 6.5

• CVE-2024-1358katılımcı+≤ 1.12.12

  Elementor Addon Elements <= 1.12.12 - Directory Traversal to Local File Inclusion

  Orta 6.5

• CVE-2025-12537katılımcı+≤ 1.14.3

  Addon Elements for Elementor <= 1.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 6.4

• CVE-2024-2792katılımcı+≤ 1.13.2

  Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Text Separator' and 'Image Compare' Widget

  Orta 6.4

• CVE-2024-47366giriş gerekir≤ 1.13.6

  WordPress Elementor Addon Elements plugin <= 1.13.6 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-30422giriş gerekir≤ 1.13.1

  WordPress Elementor Addon Elements plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-29107giriş gerekir≤ 1.12.10

  WordPress Elementor Addon Elements plugin <= 1.12.10 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-7122katılımcı+≤ 1.13.6

  Elementor Addon Elements <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

  Orta 5.4

• CVE-2024-4401katılımcı+≤ 1.13.5

  Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and eae_slider_animation Parameters

  Orta 5.4

• CVE-2024-4570katılımcı+≤ 1.13.5

  Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2024-4569katılımcı+≤ 1.13.5

  Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2024-2092katılımcı+≤ 1.13.3

  Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widget

  Orta 5.4

• CVE-2024-3743katılımcı+≤ 1.13.3

  Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2024-1422katılımcı+≤ 1.12.12

  Elementor Addon Elements <= 1.12.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Modal Popup effet

  Orta 5.4

• CVE-2024-1393katılımcı+≤ 1.12.12

  Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Switcher Widget

  Orta 5.4

• CVE-2024-1392katılımcı+≤ 1.12.12

  Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dual Button Widget

  Orta 5.4

• CVE-2024-1391katılımcı+≤ 1.12.12

  Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Thumbnail Slider Widget

  Orta 5.4

• CVE-2024-0834katılımcı+

  The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link_to parameter in all versions up

  Orta 5.4

• CVE-2023-4723kimlik doğrulamasız≤ 1.12.7

  Elementor Addon Elements <= 1.12.7 - Missing Authorization to Sensitive Information Exposure

  Orta 5.3

• CVE-2023-5381yönetici≤ 1.12.7

  Elementor Addon Elements <= 1.12.7 - Authenticated (Administrator+) Stored Cross-Site Scripting

  Orta 4.8

• CVE-2024-2091katılımcı+≤ 1.13.2

  Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 4.6

• CVE-2023-4690kimlik doğrulamasız · tıklama gerekir≤ 1.12.7

  Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery

  Orta 4.3

• CVE-2023-4689kimlik doğrulamasız · tıklama gerekir≤ 1.12.7

  Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery

  Orta 4.3

• CVE-2024-13215katılımcı+≤ 1.13.10

  Elementor Addon Elements <= 1.13.10 - Authenticated (Contributor+) Sensitive Information Exposure via Modal Popup

  Orta 4.3

• CVE-2024-8902katılımcı+≤ 1.13.8

  Elementor Addon Elements <= 1.13.8 - Authenticated (Contributor+) Sensitive Information Exposure via table_saved_sections

  Orta 4.3