Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:livemesh_addons_for_elementor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductLivemesh Addons For Elementor (0d9e38f9-2ccf-5188-8d0e-125dd19c94c3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-3862 vulnerable 2026-06-08 05:48:22.484543 Livemesh Addons for Elementor < 7.2.4 - Admin+ Stored XSS
The Livemesh Addons for Elementor WordPress plugin before 7.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Published: 2022-12-12T17:54:57.745Z
Updated: 2025-04-22T14:46:42.191Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24260 vulnerable 2026-06-08 05:30:04.069111 Livemesh Addons for Elementor < 6.8 - Contributor+ Stored XSS
The “Livemesh Addons for Elementor” WordPress Plugin before 6.8 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.
Published: 2021-05-05T18:28:46.000Z
Updated: 2024-08-03T19:28:22.726Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.