WPVibes

49 results · Feed

• High 8.8
  CVE-2024-1358

  Elementor Addon Elements <= 1.12.12 - Directory Traversal to Local File Inclusion

  The Elementor Addon Elements plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.12.12 via the render function. This makes it possible for authenticated attackers, with contributor access or higher, to include the…

  WPVibes Addon Elements for Elementor (formerly Elementor Addon Elements) Web / CMS
  Mar 13, 2024
• Critical 9.9
  CVE-2023-51410

  WordPress WP Mail Log Plugin <= 1.1.2 is vulnerable to Arbitrary File Upload

  Unrestricted Upload of File with Dangerous Type vulnerability in WPVibes WP Mail Log.This issue affects WP Mail Log: from n/a through 1.1.2.

  WPVibes WP Mail Log
  Dec 29, 2023
• High 7.6
  CVE-2023-47530

  WordPress Redirect 404 Error Page to Homepage or Custom Page with Logs Plugin <= 1.8.7 is vulnerable to SQL Injection

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPVibes Redirect 404 Error Page to Homepage or Custom Page with Logs allows SQL Injection.This issue affects Redirect 404 Error Page to Homepage or Custom Pa…

  WPVibes Redirect 404 Error Page to Homepage or Custom Page with Logs
  Dec 18, 2023
• Medium 5.4
  CVE-2023-4690

  Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery

  The Elementor Addon Elements plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.12.7. This is due to missing or incorrect nonce validation on the eae_save_config function. This makes it possible for unauthenti…

  WPVibes Addon Elements for Elementor (formerly Elementor Addon Elements) Web / CMS
  Nov 15, 2023
• Medium 5.3
  CVE-2023-4723

  Elementor Addon Elements <= 1.12.7 - Missing Authorization to Sensitive Information Exposure

  The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.12.7 via the ajax_eae_post_data function. This can allow unauthenticated attackers to extract sensitive data including post/p…

  WPVibes Addon Elements for Elementor (formerly Elementor Addon Elements) Web / CMS
  Nov 15, 2023
• Medium 4.4
  CVE-2023-5381

  Elementor Addon Elements <= 1.12.7 - Authenticated (Administrator+) Stored Cross-Site Scripting

  The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.12.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated att…

  WPVibes Addon Elements for Elementor (formerly Elementor Addon Elements) Web / CMS
  Nov 15, 2023
• Medium 5.4
  CVE-2023-4689

  Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery

  The Elementor Addon Elements plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.12.7. This is due to missing or incorrect nonce validation on the eae_save_elements function. This makes it possible for unauthen…

  WPVibes Addon Elements for Elementor (formerly Elementor Addon Elements) Web / CMS
  Nov 15, 2023
• High 7.2
  CVE-2023-3088

  WP Mail Log <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting via Email

  The WP Mail Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to in…

  WPVibes WP Mail Log Web / CMS
  Jul 12, 2023
• Medium 5.4
  CVE-2022-45807

  WordPress WP Mail Log Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)

  Cross-Site Request Forgery (CSRF) in WPVibes WP Mail Log plugin <= 1.0.1 versions.

  WPVibes WP Mail Log
  Feb 2, 2023