Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:powerpack_addons_for_elementor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductPowerpack Addons For Elementor (df821762-0d49-593f-990d-40eefee5fd67)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-25027 vulnerable 2026-06-08 05:30:39.824775 PowerPack Addons for Elementor < 2.6.2 - Reflected Cross-Site Scripting
The PowerPack Addons for Elementor WordPress plugin before 2.6.2 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting issue
Published: 2022-01-03T12:49:16.000Z
Updated: 2024-08-03T19:49:14.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24263 vulnerable 2026-06-08 05:30:04.075077 PowerPack Addons for Elementor < 2.3.2 - Contributor+ Stored XSS
The “Elementor Addons – PowerPack Addons for Elementor” WordPress Plugin before 2.3.2 for WordPress has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.
Published: 2021-05-05T18:28:46.000Z
Updated: 2024-08-03T19:28:22.655Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.