High · 7.1 CVE-2023-49739 EUVD-2023-53662GHSA-8xhg-wqv3-qqf5

WordPress PowerPack Pro for Elementor plugin <= 2.9.23 - Reflected Cross Site Scripting (XSS) vulnerability

Published Dec 14, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Vulnerability in IdeaBox Creations PowerPack Pro for Elementor.This issue affects PowerPack Pro for Elementor: from n/a through 2.9.23.

Vendor	Product	Affected	Fixed
IdeaBox Creations	PowerPack Pro for Elementor	≤ 2.9.23	—