Approved changes feed: RSS · Atom

cpe:2.3:a:webangon:xltab_–_accordions_and_tabs_for_elementor_page_builder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWebangon (13189a30-8ad9-5b00-80fc-b5b979384afd)
ProductXltab – Accordions And Tabs For Elementor Page Builder (39dd7d4d-8621-5cf8-90ad-d228e8409ca5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-47375 vulnerable 2026-06-08 06:48:11.869490 WordPress XLTab – Accordions and Tabs for Elementor Page Builder plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webangon XLTab – Accordions and Tabs for Elementor Page Builder xl-tab allows Stored XSS.This issue affects XLTab – Accordions and Tabs for Elementor Page Builder: from n/a through <= 1.3.
Published: 2024-10-05T15:14:55.530Z
Updated: 2026-04-28T16:10:20.124Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10689 vulnerable 2026-06-08 06:23:47.272906 XLTab – Accordions and Tabs for Elementor Page Builder <= 1.4 - Authenticated (Contributor+) Post Disclosure
MEDIUM (4.3)
The XLTab – Accordions and Tabs for Elementor Page Builder plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.4 via the 'XLTAB_INSERT_TPL' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to.
Published: 2024-12-06T08:24:58.598Z
Updated: 2026-04-08T17:27:41.407Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.