Approved changes feed: RSS · Atom

cpe:2.3:a:wordpress:free_widgets_for_elementor_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWordpress (21977de4-0364-5ea6-90ad-48069434cf00)
ProductFree Widgets For Elementor Plugin (c337cba5-6427-573b-8e8f-76c40d42744d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-5382 vulnerable 2026-06-08 06:56:15.766219 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to MA Template Creation or Modification
MEDIUM (6.5)
The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ma-template' REST API route in all versions up to, and including, 2.0.6.1. This makes it possible for unauthenticated attackers to create or modify existing Master Addons templates or make settings modifications related to these templates.
Published: 2024-06-07T12:33:44.437Z
Updated: 2026-04-08T17:29:25.211Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.