Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-47329 EUVD-2024-42365GHSA-vgpw-9fgq-3ph7

WordPress ElementsReady Addons for Elementor plugin <= 6.4.0 - Cross Site Scripting (XSS) vulnerability

Published Oct 6, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in quomodosoft ElementsReady Addons for Elementor element-ready-lite allows Cross-Site Scripting (XSS).This issue affects ElementsReady Addons for Elementor: from n/a through <= 6.4.0.

Affected products

VendorProductAffectedFixed
quomodosoft ElementsReady Addons for Elementor ≤ 6.4.0 —

References