Ultraaddons – Elementor Addons (Header Footer Builder, Custom Font, Custom Css,Woo Widget, Menu Builder, Anywhere Elementor Shortcode)
Approved changes feed: RSS · Atom
cpe:2.3:a:codersaiful:ultraaddons_–_elementor_addons_(header_footer_builder,_custom_font,_custom_css,woo_widget,_menu_builder,_anywhere_elementor_shortcode):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Codersaiful (5e2455d8-3b23-58ca-8e63-03705ce48849) |
|---|---|
| Product | Ultraaddons – Elementor Addons (Header Footer Builder, Custom Font, Custom Css,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) (a22538dc-3e6e-5c38-838e-53fc4722d932) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-10696 |
vulnerable | 2026-06-08 06:23:47.285751 |
UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) <= 1.1.8 - Insecure Direct Object Reference to Sensitive Information Exposure via UA_Template Shortcode
MEDIUM (4.3)
The UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.8 via the show_template due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Contributor-level access and above, to expose the contents of draft, private, and pending posts.
Published: 2024-11-21T02:06:36.161Z
Updated: 2026-04-08T17:00:37.162Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.