Advisories · Technology
Xpro Addons — 140+ Widgets for Elementor.
Every CVE that names Xpro Addons — 140+ Widgets for Elementor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
Xpro Elementor Addons < 1.7.9 - Contributor+ Stored XSS via Interactive Circle Widget
- Xpro Addons — 140+ Widgets for Elementor
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Xpro Elementor Addons < 1.7.8 - Unauthenticated Draft/Private Product Disclosure via Quick View
- Xpro Addons — 140+ Widgets for Elementor
- Information disclosure
- CVSS 4.3 Medium
Xpro Addons <= 1.5.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Creation via get_menu_content_editor() Function
- Xpro Addons — 140+ Widgets for Elementor
- Broken access control
- CVSS 6.4 Medium
Xpro Addons <= 1.7.2 - Authenticated (Author+) Stored Cross-Site Scripting via 'custom_attributes' Parameter of Multiple Widgets
- Xpro Addons — 140+ Widgets for Elementor
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Xpro Addons — 140+ Widgets for Elementor <= 1.5.0 - Missing Authorization to Unauthenticated Xpro Template Creation
- Xpro Addons — 140+ Widgets for Elementor
- Broken access control
- CVSS 6.4 Medium
Xpro Addons — 140+ Widgets for Elementor <= 1.4.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
- Xpro Addons — 140+ Widgets for Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Box Widget
- Xpro Addons — 140+ Widgets for Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Scroller Widget box link
- Xpro Addons — 140+ Widgets for Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Site Title' widget
- Xpro Addons — 140+ Widgets for Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
- Xpro Addons — 140+ Widgets for Elementor
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.2 - Authenticated (Contributor+) Post Disclosure via Post Duplication
- Xpro Addons — 140+ Widgets for Elementor
- Information disclosure
- CVSS 4.3 Medium
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template
- Xpro Addons — 140+ Widgets for Elementor
- Information disclosure
- CVSS 6.4 Medium
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Grid Widget
- Xpro Addons — 140+ Widgets for Elementor
- Cross-site scripting (XSS)
- CVSS 8.0 High
140+ Widgets | Best Addons For Elementor – FREE <= 1.4.3.1 - Authenticated (Contributor+) PHP Object Injection
- Xpro Addons — 140+ Widgets for Elementor
- Insecure deserialization
- CVSS 6.4 Medium
140+ Widgets | Best Addons For Elementor – FREE <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
- Xpro Addons — 140+ Widgets for Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
130+ Widgets | Best Addons For Elementor – FREE <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
- Xpro Addons — 140+ Widgets for Elementor
- Cross-site scripting (XSS)