Approved changes feed: RSS · Atom

cpe:2.3:a:jewel_theme:master_addons_for_elementor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJewel Theme (0fbda1e7-68f3-546a-9bd8-da7439ee5590)
ProductMaster Addons For Elementor (b95a82ff-0cd7-5bc1-9259-fa793f31f3ef)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-63053 vulnerable 2026-06-08 07:39:17.228368 WordPress Master Addons for Elementor plugin <= 2.0.9.9.4 - Insecure Direct Object References (IDOR) vulnerability
MEDIUM (5.3)
Authorization Bypass Through User-Controlled Key vulnerability in Liton Arefin Master Addons for Elementor master-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Master Addons for Elementor: from n/a through <= 2.0.9.9.4.
Published: 2025-12-31T14:59:09.225Z
Updated: 2026-04-28T16:14:09.618Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38710 vulnerable 2026-06-08 06:41:47.973530 WordPress Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin <= 2.0.6.2 - Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jewel Theme Master Addons for Elementor allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through 2.0.6.2.
Published: 2024-07-20T07:29:39.683Z
Updated: 2026-04-28T16:10:05.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35702 vulnerable 2026-06-08 06:39:42.423089 WordPress Master Addons for Elementor plugin <= 2.0.6.0 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jewel Theme Master Addons for Elementor allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through 2.0.6.0.
Published: 2024-06-08T14:15:15.789Z
Updated: 2026-04-28T16:09:53.609Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35688 vulnerable 2026-06-08 06:39:42.375883 WordPress Master Addons for Elementor plugin <= 2.0.5.9 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jewel Theme Master Addons for Elementor allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through 2.0.5.9.
Published: 2024-06-08T14:41:53.403Z
Updated: 2026-04-28T16:09:53.129Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35660 vulnerable 2026-06-08 06:39:42.267007 WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Broken Access Control on API vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1.
Published: 2024-06-09T11:56:16.879Z
Updated: 2026-04-28T16:09:52.464Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33595 vulnerable 2026-06-08 06:37:31.718326 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29911 vulnerable 2026-06-08 06:33:29.534591 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40679 vulnerable 2026-06-08 06:11:04.210817 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.