Approved changes feed: RSS · Atom

cpe:2.3:a:rrdevs:rraddons_for_elementor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRrdevs (808bf6f0-5ebe-59d0-85d7-cc82756f12b3)
ProductRraddons For Elementor (5b8f3062-e096-5a85-b24e-3cb5fef0becd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-54232 vulnerable 2026-06-08 06:54:16.217046 WordPress RRAddons for Elementor plugin <= 1.1.0 - Stored Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RRDevs RRAddons for Elementor rrdevs-for-elementor allows Stored XSS.This issue affects RRAddons for Elementor: from n/a through <= 1.1.0.
Published: 2024-12-09T11:32:12.751Z
Updated: 2026-04-28T16:10:47.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11915 vulnerable 2026-06-08 06:23:50.663861 RRAddons for Elementor <= 1.1.0 - Authenticated (Contributor+) Post Disclosure
MEDIUM (4.3)
The RRAddons for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.0 via the Popup block due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts that they should not have access to.
Published: 2025-01-11T07:21:51.144Z
Updated: 2026-04-08T16:48:12.443Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.