Browse CVEs

MEDIUM 6.1 CVE-2024-12239 The PowerPack Lite for Beaver Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the navigate parameter in all versions… Powerpack For Beaver Builder 1.3.1+ Fix from $1,6002024-12-17 MEDIUM 6.1 CVE-2024-43330 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack for Beaver B… Powerpack For Beaver Builder 2.37.4+ Fix from $1,6002024-08-18 MEDIUM 5.4 CVE-2024-37409 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Lite for Beaver Bui… Powerpack For Beaver Builder 1.3.0.5+ Fix from $1,6002024-07-22 HIGH 7.2 CVE-2024-37410 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in IdeaBox Creations PowerPack … Powerpack For Beaver Builder 1.3.0.4+ Fix from $1,9502024-07-09 MEDIUM 5.4 CVE-2024-5787 The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Powerpack Addons For Elementor 2.7.21+ Fix from $1,6002024-06-13 HIGH 8.8 CVE-2024-3668 The PowerPack Pro for Elementor plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.10.17. This is due… Powerpack Addons For Elementor 2.10.18+ Fix from $1,9502024-06-08 MEDIUM 5.4 CVE-2024-5327 The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripti… Powerpack Addons For Elementor 2.7.20+ Fix from $1,6002024-05-30 MEDIUM 5.4 CVE-2024-2492 The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Twitter Tweet widget in all versions up … Powerpack Addons For Elementor 2.7.19+ Fix from $1,6002024-04-09 MEDIUM 5.4 CVE-2024-2289 The PowerPack Lite for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link in multiple elements in all vers… Powerpack For Beaver Builder 1.3.0.1+ Fix from $1,6002024-04-09 MEDIUM 5.4 CVE-2024-2491 The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the *_html_tag* attribute of multiple widget… Powerpack Addons For Elementor 2.7.18+ Fix from $1,6002024-03-30 MEDIUM 5.4 CVE-2024-1411 The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the settings of the Twitter Buttons Widget i… Powerpack Addons For Elementor 2.7.16+ Fix from $1,6002024-02-29 MEDIUM 5.4 CVE-2024-1055 The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Powerpack Addons For Elementor 2.7.15+ Fix from $1,6002024-02-07 MEDIUM 6.1 CVE-2023-49739 Vulnerability in IdeaBox Creations PowerPack Pro for Elementor.This issue affects PowerPack Pro for Elementor: from n/a through 2.9.23. Powerpack Addons For Elementor 2.9.24+ Fix from $1,6002023-12-14 MEDIUM 6.1 CVE-2022-0176 The PowerPack Lite for Beaver Builder WordPress plugin before 1.2.9.3 does not sanitise and escape the tab parameter before outputting it back in an … Powerpack For Beaver Builder 1.2.9.3+ Fix from $1,6002022-02-14 MEDIUM 6.1 CVE-2021-25027 The PowerPack Addons for Elementor WordPress plugin before 2.6.2 does not escape the tab parameter before outputting it back in an attribute in the a… Powerpack Addons For Elementor 2.6.2+ Fix from $1,6002022-01-03 MEDIUM 5.4 CVE-2021-24263 The “Elementor Addons – PowerPack Addons for Elementor” WordPress Plugin before 2.3.2 for WordPress has several widgets that are vulnerable to stored… Powerpack Addons For Elementor 2.3.2+ Fix from $1,6002021-05-05