RandomRoot

2024

Critical

High

Medium

Low

Global Rank

#251

of 3,213 researchers

Vulns

19

Critical0

High0

Medium19

Low0

Affected Assets

17

17plugins

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

19 records


2024-08-26 22:18	140+ Widgets \| Xpro Addons For Elementor – FREE <= 1.4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Grid Widget Xpro Addons <= 1.4.4.3	`CVE-2024-7791`	6.4 Medium	RandomRoot	Yes
2024-06-12 20:25	EmbedPress <= 3.9.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via PDF Widget URL EmbedPress <= 3.9.10	`CVE-2024-1565`	6.4 Medium	RandomRoot	Yes
2024-06-04 17:42	Brizy – Page Builder <= 2.4.43 - Authenticated(Contributor+) Stored Cross-Site Scripting via Form Functionality Brizy <= 2.4.43	`CVE-2024-1164`	6.4 Medium	RandomRoot	Yes
2024-05-29 15:16	WPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting WPB Addons for Elementor <= 1.0.9	`CVE-2024-3063`	6.4 Medium	RandomRoot	Yes
2024-04-17 00:00	Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Panel Slider Widget Element Pack Addons for Elementor <= 5.6.0	`CVE-2024-1429`	6.4 Medium	RandomRoot	Yes
2024-04-04 00:00	Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Stack Widget Happy Addons for Elementor <= 3.10.3	`CVE-2024-1498`	6.4 Medium	RandomRoot	Yes
2024-03-15 00:00	ElementsKit Elementor addons <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting ElementsKit Elementor Addons <= 3.0.4	`CVE-2024-1239`	6.4 Medium	RandomRoot	Yes
2024-03-13 00:00	Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Carousel Widget Livemesh Addons by Elementor <= 8.3.4	`CVE-2024-1465`	6.4 Medium	RandomRoot	Yes
2024-03-12 00:00	Prime Slider – Addons For Elementor <= 3.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Mercury Widget Prime Slider Addons for Elementor <= 3.13.2	`CVE-2024-1508`	6.4 Medium	RandomRoot	Yes
2024-02-29 00:00	Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget Exclusive Addons for Elementor <= 2.6.9	`CVE-2024-1413`	6.4 Medium	RandomRoot	Yes

Showing 1–10 of 19 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C