İçeriğe atla
Noroxi

Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits

master-addons · eklenti

Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits için bilinen güvenlik açıkları. Sitenizde bu bileşenin hangi sürümünün çalıştığını WP Lens ile saniyede öğrenin.

29 bilinen açık

1 kritik · son kayıt 18 Eyl 2026

Güvenlik açıkları

  • CVE-2024-35660

    WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Broken Access Control on API vulnerability

    Kritik 9.8

  • CVE-2026-3132

    Master Addons for Elementor Premium <= 2.1.3 - Authenticated (Subscriber+) Remote Code Execution via render_preview

    Yüksek 8.8

  • CVE-2024-33595

    WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Broken Access Control on Duplicate Post vulnerability

    Yüksek 8.8

  • CVE-2026-85410

    Master Addons for Elementor <= 3.2.2 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Modification/Deletion via 'popup_id' Parameter

    Yüksek 8.1

  • CVE-2026-75921

    Master Addons for Elementor <= 3.1.9 - Incorrect Authorization to Authenticated (Editor+) Arbitrary File Upload via upload_template_kit AJAX ZIP Extraction

    Yüksek 7.2

  • CVE-2026-62089

    WordPress Master Addons for Elementor plugin <= 3.2.2 - Broken Access Control vulnerability

    Yüksek 7.1

  • CVE-2023-40679

    WordPress Master Elementor Addons plugin <= 2.0.5.3 - Broken Access Control vulnerability

    Orta 6.5

  • CVE-2025-63055

    WordPress Master Addons for Elementor plugin <= 2.0.9.9.4 - Cross Site Scripting (XSS) vulnerability

    Orta 6.5

  • CVE-2026-9281

    Master Addons For Elementor <= 3.1.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'jtlma_custom_js' Page Setting (Custom JS Extension)

    Orta 6.4

  • CVE-2026-2486

    Master Addons For Elementor <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ma_el_bh_table_btn_text'

    Orta 6.4

  • CVE-2025-8874

    Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.6 - Authenticated (Contributor+) Stored Cross-

    Orta 6.4

  • CVE-2025-5284

    Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.2 - Authenticated (Contributor+) Stored Cross-

    Orta 6.4

  • CVE-2024-5542

    Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to Unauthenticated Stored Cross-Sit

    Orta 6.1

  • CVE-2026-32462

    WordPress Master Addons for Elementor plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

    Orta 5.9

  • CVE-2024-52387

    WordPress Master Addons plugin <= 2.0.9.9.4 - Cross Site Scripting (XSS) vulnerability

    Orta 5.9

  • CVE-2025-0433

    Master Addons <= 2.0.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

    Orta 5.4

  • CVE-2024-9618

    Master Addons <= 2.0.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

    Orta 5.4

  • CVE-2024-9502

    Master Addons -- Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Orta 5.4

  • CVE-2024-6282

    Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Orta 5.4

  • CVE-2024-35702

    WordPress Master Addons for Elementor plugin <= 2.0.6.0 - Cross Site Scripting (XSS) vulnerability

    Orta 5.4

  • CVE-2024-35688

    WordPress Master Addons for Elementor plugin <= 2.0.5.9 - Cross Site Scripting (XSS) vulnerability

    Orta 5.4

  • CVE-2024-3134

    Master Addons for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Orta 5.4

  • CVE-2024-4580

    Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Orta 5.4

  • CVE-2024-4265

    Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.5.9 - Contributor+ Stored Cross-Site Scripting

    Orta 5.4

  • CVE-2024-29911

    WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Cross Site Scripting (XSS) vulnerability

    Orta 5.4

  • CVE-2024-2139

    Master Addons for Elementor <= 2.0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget

    Orta 5.4

  • CVE-2025-63053

    WordPress Master Addons for Elementor plugin <= 2.0.9.9.4 - Insecure Direct Object References (IDOR) vulnerability

    Orta 5.3

  • CVE-2024-5382

    Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to MA Template Creation or Modifica

    Orta 5.3

  • CVE-2024-38710

    WordPress Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin <= 2.0.6.2 - Cross Site Scripting (XSS) vulnerability

    Orta 4.8

← Dizine dön