Addons For Elementor
Approved changes feed: RSS · Atom
cpe:2.3:a:livemeshelementor:addons_for_elementor:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Livemeshelementor (76f35e59-3268-5486-b6b2-bf395271f242) |
|---|---|
| Product | Addons For Elementor (4485b4d5-3c35-5e67-bea0-be9273fee46a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8858 |
vulnerable | 2026-06-08 07:00:25.850381 |
Elementor Addons by Livemesh <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via piechart_settings Parameter
MEDIUM (6.4)
The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘piechart_settings’ parameter in all versions up to, and including, 8.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. CVE-2024-47303 is likely a duplicate of this issue.
Published: 2024-09-25T10:59:51.550Z
Updated: 2026-04-08T17:25:41.347Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47303 |
vulnerable | 2026-06-08 06:48:11.732292 |
WordPress Elementor Addons by Livemesh plugin <= 8.5 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in livemesh Livemesh Addons for Elementor addons-for-elementor allows Cross-Site Scripting (XSS).This issue affects Livemesh Addons for Elementor: from n/a through <= 8.5.
Published: 2024-09-25T08:01:34.664Z
Updated: 2026-04-28T16:10:18.437Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3639 |
vulnerable | 2026-06-08 06:43:51.036896 |
Elementor Addons by Livemesh <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Grid
MEDIUM (6.4)
The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Posts Grid widget in all versions up to, and including, 8.3.7 due to insufficient input sanitization and output escaping on user supplied attributes like 'grid_skin'. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2024-07-04T03:32:24.553Z
Updated: 2026-04-08T17:10:22.913Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3638 |
vulnerable | 2026-06-08 06:43:51.036282 |
Elementor Addons by Livemesh <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Marquee Text Widget, Testimonials Widget, and Testimonial Slider Widgets
MEDIUM (6.4)
The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Marquee Text Widget, Testimonials Widget, and Testimonial Slider widgets in all versions up to, and including, 8.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2024-07-04T03:32:23.393Z
Updated: 2026-04-08T16:54:38.761Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2926 |
vulnerable | 2026-06-08 06:35:27.720228 |
Elementor Addons by Livemesh <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Various Widgets
MEDIUM (6.4)
The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and including, 8.3.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2024-07-04T03:32:24.045Z
Updated: 2026-04-08T17:02:01.888Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2655 |
vulnerable | 2026-06-08 06:33:31.730231 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2539 |
vulnerable | 2026-06-08 06:33:31.308560 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2385 |
vulnerable | 2026-06-08 06:33:30.988016 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27986 |
vulnerable | 2026-06-08 06:33:25.270482 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25598 |
vulnerable | 2026-06-08 06:31:23.348143 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1466 |
vulnerable | 2026-06-08 06:25:40.139619 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1465 |
vulnerable | 2026-06-08 06:25:40.139057 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1464 |
vulnerable | 2026-06-08 06:25:40.138560 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1461 |
vulnerable | 2026-06-08 06:25:40.137217 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1458 |
vulnerable | 2026-06-08 06:25:40.131198 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1235 |
vulnerable | 2026-06-08 06:25:39.634747 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3862 |
vulnerable | 2026-06-08 05:48:22.485452 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24260 |
vulnerable | 2026-06-08 05:30:04.069624 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.