moveaddons

9 results · Clear filters · Feed

• Medium 6.5
  CVE-2024-56254

  WordPress Move Addons for Elementor plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in moveaddons Move Addons for Elementor move-addons allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through <= 1.3.6.

  moveaddons Move Addons for Elementor
  Jan 2, 2025
• Medium 4.3
  CVE-2024-10360

  Move Addons for Elementor <= 1.3.5 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates

  The Move Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the render function in includes/widgets/accordion/widget.php, includes/widgets/remote-template/widget.php, and o…

  moveaddons Move Addons for Elementor Web / CMS
  Oct 29, 2024
• Medium 6.5
  CVE-2024-47364

  WordPress Move Addons for Elementor plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in moveaddons Move Addons for Elementor move-addons allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through <= 1.3.4.

  moveaddons Move Addons for Elementor
  Oct 6, 2024
• Medium 6.5
  CVE-2024-47396

  WordPress Move Addons for Elementor plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in moveaddons Move Addons for Elementor move-addons allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through <= 1.3.3.

  moveaddons Move Addons for Elementor
  Oct 1, 2024
• Medium 5.3
  CVE-2024-30525

  WordPress Move Addons for Elementor plugin <= 1.2.9 - Broken Access Control vulnerability

  Missing Authorization vulnerability in moveaddons Move Addons for Elementor.This issue affects Move Addons for Elementor: from n/a through 1.2.9.

  moveaddons Move Addons for Elementor
  Jun 4, 2024
• Medium 6.4
  CVE-2024-4695

  Move Addons for Elementor <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

  The Move Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes…

  moveaddons Move Addons for Elementor Web / CMS
  May 21, 2024
• Medium 6.5
  CVE-2024-34562

  WordPress Move Addons for Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through 1.3.0.

  moveaddons Move Addons for Elementor
  May 8, 2024
• Medium 6.5
  CVE-2024-29920

  WordPress Move Addons for Elementor plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through 1.2.9.

  moveaddons Move Addons for Elementor
  Mar 27, 2024
• Medium 6.4
  CVE-2024-2131

  Move Addons for Elementor <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

  The Move Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's infobox and button widget in all versions up to, and including, 1.2.9 due to insufficient input sanitization and output escaping on user supplied …

  moveaddons Move Addons for Elementor Web / CMS
  Mar 23, 2024