Approved changes feed: RSS · Atom

cpe:2.3:a:saiful_islam:ultraaddons_elementor_lite:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSaiful Islam (69bd04dd-8eda-5386-bce3-00aa0590edd7)
ProductUltraaddons Elementor Lite (90fa4bd6-9ed0-5ce5-a92e-80927d59f14d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-48131 vulnerable 2026-06-08 07:27:15.512821 WordPress UltraAddons Elementor Lite plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saiful Islam UltraAddons Elementor Lite ultraaddons-elementor-lite allows Stored XSS.This issue affects UltraAddons Elementor Lite: from n/a through <= 2.0.2.
Published: 2025-05-16T15:45:12.591Z
Updated: 2026-04-28T16:12:52.156Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32264 vulnerable 2026-06-08 07:18:59.386005 WordPress UltraAddons – Elementor Addons plugin <= 2.0.2 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Saiful Islam UltraAddons Elementor Lite ultraaddons-elementor-lite allows Cross Site Request Forgery.This issue affects UltraAddons Elementor Lite: from n/a through <= 2.0.2.
Published: 2025-04-04T15:59:39.503Z
Updated: 2026-04-28T16:12:19.996Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49277 vulnerable 2026-06-08 06:50:13.340597 WordPress UltraAddons – Elementor Addons plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saiful Islam UltraAddons Elementor Lite ultraaddons-elementor-lite allows Stored XSS.This issue affects UltraAddons Elementor Lite: from n/a through <= 2.0.2.
Published: 2024-10-17T19:23:40.347Z
Updated: 2026-04-28T16:10:24.552Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37554 vulnerable 2026-06-08 06:39:47.916375 WordPress UltraAddons plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saiful Islam UltraAddons Elementor Lite ultraaddons-elementor-lite allows DOM-Based XSS.This issue affects UltraAddons Elementor Lite: from n/a through <= 2.0.2.
Published: 2024-07-06T16:12:55.519Z
Updated: 2026-04-28T16:10:01.311Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.