Essential Addons For Elementor
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:essential_addons_for_elementor:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Essential Addons For Elementor (f3677867-5328-5001-9898-b069da135f5b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-13344 |
vulnerable | 2026-09-16 04:32:50.211812 |
Essential Addons for Elementor - Lite < 6.6.10 - Contributor+ Stored XSS via Pricing Table Title Tag
The Essential Addons for Elementor WordPress plugin before 6.6.10 does not validate the HTML tag name of the Pricing Table widget title before outputting it, allowing users with Contributor-level access and above to inject JavaScript that will be executed (Stored Cross-Site Scripting) when the page is viewed, including in the session of an administrator previewing or visiting the post.
Published: 2026-07-30T06:00:12.016Z
Updated: 2026-07-30T12:34:00.047Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0320 |
vulnerable | 2026-06-08 05:39:09.711695 |
Essential Addons for Elementor < 5.0.5 - Unauthenticated LFI
The Essential Addons for Elementor WordPress plugin before 5.0.5 does not validate and sanitise some template data before it them in include statements, which could allow unauthenticated attackers to perform Local File Inclusion attack and read arbitrary files on the server, this could also lead to RCE via user uploaded files or other LFI to RCE techniques.
Published: 2022-02-01T12:21:42.000Z
Updated: 2024-08-02T23:25:39.945Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24255 |
vulnerable | 2026-06-08 05:30:04.060086 |
Essential Addons for Elementor < 4.5.4 - Contributor+ Stored Cross-Site Scripting (XSS)
The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, both via a similar method.
Published: 2021-05-05T18:28:45.000Z
Updated: 2024-08-03T19:28:22.650Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.