Skip to content
OpenAdvisories

Vendor

leap13

45 known vulnerabilities.

Products

Premium Addons for Elementor – Powerful Elementor Templates & Widgets 29 Premium Addons for Elementor 10 Premium Blocks – Gutenberg Blocks for WordPress 4 Disable Elementor Editor Translation 1 Premium Addons PRO 1
All Critical High Medium Low Exploited only Public exploit

45 results · Feed

  • Medium 6.4
    CVE-2024-1680

    Premium Addons for Elementor <= 4.10.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Banner, Team Members, and Image Scroll Widgets

    The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Settings URL of the Banner, Team Members, and Image Scroll widgets in all versions up to, and including, 4.10.21 due to insufficient input sanitiz…

    leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets Web / CMS
  • Medium 6.4
    CVE-2024-0326

    Premium Addons for Elementor <= 4.10.17 - Authenticated(Contributor+) Stored Cross-Site Scripting via Link Wrapper

    The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Link Wrapper functionality in all versions up to, and including, 4.10.17 due to insufficient input sanitization and output escaping on user sup…

    leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets Web / CMS
  • Medium 6.4
    CVE-2024-1242

    Premium Addons for Elementor <= 4.10.18 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button onclick attribute in all versions up to, and including, 4.10.18 due to insufficient input sanitization and output escaping. This makes it possibl…

    leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets Web / CMS
  • Medium 6.5
    CVE-2024-24831

    WordPress Premium Addons for Elementor plugin <= 4.10.16 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor.This issue affects Premium Addons for Elementor: from n/a through <= 4.10.16.

    leap13 Premium Addons for Elementor
  • Medium 6.5
    CVE-2023-37868

    WordPress Premium Addons PRO Plugin <= 2.9.0 is vulnerable to Sensitive Data Exposure

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Leap13 Premium Addons PRO.This issue affects Premium Addons PRO: from n/a through 2.9.0.

    leap13 Premium Addons PRO