Elementsready

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:quomodosoft:elementsready:*:*:*:*:free:wordpress:*:*

part: a version: * update: *

VendorQuomodosoft (88507fa0-ddcd-546e-ae9d-73c2f7637e08)
ProductElementsready (45eac7ca-8bec-52d6-af05-aa031637a626)
Edition*
Language*
Software editionfree
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9444 vulnerable 2026-06-08 07:00:27.543936 ElementsReady Addons for Elementor <= 6.4.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
MEDIUM (6.4)
The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
Published: 2024-10-16T09:32:20.325Z
Updated: 2026-04-08T17:19:16.730Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54224 vulnerable 2026-06-08 06:54:16.205265 WordPress ElementsReady Addons for Elementor plugin <= 6.4.7 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in quomodosoft ElementsReady Addons for Elementor element-ready-lite allows DOM-Based XSS.This issue affects ElementsReady Addons for Elementor: from n/a through <= 6.4.7.
Published: 2024-12-09T11:32:15.235Z
Updated: 2026-04-28T16:10:47.766Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51787 vulnerable 2026-06-08 06:52:12.824009 WordPress ElementsReady Addons for Elementor plugin <= 6.4.3 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in quomodosoft ElementsReady Addons for Elementor element-ready-lite allows Stored XSS.This issue affects ElementsReady Addons for Elementor: from n/a through <= 6.4.3.
Published: 2024-11-09T08:22:06.426Z
Updated: 2026-04-28T16:10:36.127Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47353 vulnerable 2026-06-08 06:48:11.830596 WordPress ElementsReady Addons for Elementor plugin <= 6.4.2 - Open Redirection vulnerability
MEDIUM (4.7)
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in quomodosoft ElementsReady Addons for Elementor element-ready-lite.This issue affects ElementsReady Addons for Elementor: from n/a through 6.4.2.
Published: 2024-10-11T18:12:10.055Z
Updated: 2026-04-28T16:10:19.607Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47329 vulnerable 2026-06-08 06:48:11.787603 WordPress ElementsReady Addons for Elementor plugin <= 6.4.0 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in quomodosoft ElementsReady Addons for Elementor element-ready-lite allows Cross-Site Scripting (XSS).This issue affects ElementsReady Addons for Elementor: from n/a through <= 6.4.0.
Published: 2024-10-06T11:03:59.014Z
Updated: 2026-04-28T16:10:18.813Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34374 vulnerable 2026-06-08 06:37:33.193629 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10356 vulnerable 2026-06-08 06:22:04.051811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.