Skip to content
OpenAdvisories

Vendor

WPXpro

2 known vulnerabilities.

Products

Xpro Elementor Addons - Pro 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-13808

    Xpro Elementor Addons - Pro <= 1.4.9 - Authenticated (Contributor+) Remote Code Execution

    The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.9 via the custom PHP widget. This is due to their only being client side controls when determining who can access the widget.…

    WPXpro Xpro Elementor Addons - Pro Web / CMS