İçeriğe atla
Noroxi

Xpro Addons — 140+ Widgets for Elementor

xpro-elementor-addons · eklenti

Xpro Addons — 140+ Widgets for Elementor için bilinen güvenlik açıkları. Sitenizde bu bileşenin hangi sürümünün çalıştığını WP Lens ile saniyede öğrenin.

22 bilinen açık

1 kritik · son kayıt 5 Ağu 2026

Güvenlik açıkları

  • CVE-2025-69312

    WordPress Xpro Elementor Addons plugin <= 1.4.19.1 - Arbitrary File Upload vulnerability

    Kritik 9.1

  • CVE-2026-45214

    WordPress Xpro Elementor Addons plugin <= 1.5.1 - SQL Injection vulnerability

    Yüksek 8.5

  • CVE-2024-4471

    140+ Widgets | Best Addons For Elementor – FREE <= 1.4.3.1 - Authenticated (Contributor+) PHP Object Injection

    Yüksek 8.0

  • CVE-2025-63044

    WordPress Xpro Elementor Addons plugin <= 1.4.19.1 - Cross Site Scripting (XSS) vulnerability

    Orta 6.5

  • CVE-2025-58195

    WordPress Xpro Elementor Addons Plugin <= 1.4.17 - Cross Site Scripting (XSS) Vulnerability

    Orta 6.5

  • CVE-2025-32163

    WordPress Xpro Elementor Addons plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability

    Orta 6.5

  • CVE-2024-12584

    140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.2 - Authenticated (Contributor+) Post Disclosure via Post Duplication

    Orta 6.5

  • CVE-2026-11614

    Xpro Addons <= 1.7.2 - Authenticated (Author+) Stored Cross-Site Scripting via 'custom_attributes' Parameter of Multiple Widgets

    Orta 6.4

  • CVE-2025-13368

    Xpro Addons — 140+ Widgets for Elementor <= 1.4.20 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Orta 6.4

  • CVE-2026-2949

    Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Box Widget

    Orta 6.4

  • CVE-2025-14149

    Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Scroller Widget box link

    Orta 6.4

  • CVE-2025-2108

    140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Site Title' widget

    Orta 6.4

  • CVE-2024-4440

    140+ Widgets | Best Addons For Elementor – FREE <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

    Orta 6.4

  • CVE-2024-2250

    130+ Widgets | Best Addons For Elementor – FREE <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Orta 6.4

  • CVE-2024-13649

    140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Orta 5.4

  • CVE-2024-54253

    WordPress Xpro Addons For Elementor plugin <= 1.4.6.5 - Cross Site Scripting (XSS) vulnerability

    Orta 5.4

  • CVE-2024-7791

    140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Grid Widget

    Orta 5.4

  • CVE-2024-43150

    WordPress Xpro Elementor Addons plugin <= 1.4.4.2 - Cross Site Scripting (XSS) vulnerability

    Orta 5.4

  • CVE-2025-15369

    Xpro Addons — 140+ Widgets for Elementor <= 1.5.0 - Missing Authorization to Unauthenticated Xpro Template Creation

    Orta 5.3

  • CVE-2024-34570

    WordPress Xpro Elementor Addons plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability

    Orta 4.8

  • CVE-2026-7105

    Xpro Addons <= 1.5.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Creation via get_menu_content_editor() Function

    Orta 4.3

  • CVE-2024-10319

    140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template

    Orta 4.3

← Dizine dön