Advisories · Technology
Piotnet Addons For Elementor Pro.
Every CVE that names Piotnet Addons For Elementor Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.6 CriticalCritical · CVSS 9+
WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.67 - Arbitrary File Upload vulnerability
- Piotnet Addons For Elementor Pro
- Unrestricted file upload
- CVSS 9.8 CriticalCritical · CVSS 9+
Piotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload via Form File Upload
- Piotnet Addons For Elementor Pro
- Unrestricted file upload
- CVSS 7.5 High
WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Unauthenticated Arbitrary Post/Page Deletion vulnerability
- Piotnet Addons For Elementor Pro
- Broken access control
- CVSS 5.4 Medium
WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Unauthenticated Server Side Request Forgery (SSRF) vulnerability
- Piotnet Addons For Elementor Pro
- Server-side request forgery (SSRF)
- CVSS 5.4 Medium
WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Cross Site Request Forgery (CSRF) vulnerability
- Piotnet Addons For Elementor Pro
- Cross-site request forgery (CSRF)
- CVSS 6.5 Medium
WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Authenticated Stored Cross Site Scripting (XSS) vulnerability
- Piotnet Addons For Elementor Pro
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Reflected Cross Site Scripting (XSS) vulnerability
- Piotnet Addons For Elementor Pro
- Cross-site scripting (XSS)