Browse CVEs

MEDIUM 5.4 CVE-2024-2803 The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the countdown widget in all versions up to, an… Elements Kit Elementor Addons 3.1.0+ Fix from $1,6002024-04-04 MEDIUM 5.4 CVE-2024-2791 The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions… Metform Elementor Contact Form Builder 3.8.6+ Fix from $1,6002024-04-02 HIGH 8.8 CVE-2024-2047 The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.0.6 via the rende… Elements Kit Elementor Addons 3.0.7+ Fix from $1,9502024-03-30 MEDIUM 5.4 CVE-2024-1238 The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button ID parameter in all versions up to,… Elements Kit Elementor Addons 3.0.7+ Fix from $1,6002024-03-30 MEDIUM 5.4 CVE-2024-2042 The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Accordion widget in all versions up … Elements Kit Elementor Addons 3.0.6+ Fix from $1,6002024-03-16 MEDIUM 5.4 CVE-2024-1239 The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the blog post read more button in all versions… Elements Kit Elementor Addons 3.0.5+ Fix from $1,6002024-03-16 MEDIUM 5.3 CVE-2024-1763 The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c… Wp Social Login And Register Social Counter after 3.0.0 Fix from $1,6002024-03-13 MEDIUM 5.4 CVE-2024-1585 The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all ver… Metform Elementor Contact Form Builder 3.8.4+ Fix from $1,6002024-03-13 MEDIUM 6.5 CVE-2022-47160 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wpmet Wp Social Login and Register Social Counter.This issue affects Wp S… Wp Social Login And Register Social Counter 2.0.0+ Fix from $1,6002024-01-19 MEDIUM 5.3 CVE-2023-6582 The ElementsKit Elementor addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.3 via… Elements Kit Elementor Addons 3.0.4+ Fix from $1,6002024-01-11 MEDIUM 5.4 CVE-2023-6788 The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8… Metform Elementor Contact Form Builder after 3.8.1 Fix from $1,6002024-01-09 HIGH 8.8 CVE-2023-28987 Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions. Wp Ultimate Review after 2.0.3 Fix from $1,9502023-11-12 HIGH 8.8 CVE-2023-46085 Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.2.4 versions. Wp Ultimate Review after 2.2.4 Fix from $1,9502023-10-22 MEDIUM 5.3 CVE-2023-1843 The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to unauthorized permalink structure update due to a missing capability … Metform Elementor Contact Form Builder after 3.3.0 Fix from $1,6002023-06-09 HIGH 7.8 CVE-2023-0721 The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to CSV injection in versions up to, and including, 3.3.0. This allows u… Metform Elementor Contact Form Builder after 3.3.0 Fix from $1,9502023-06-09 MEDIUM 5.4 CVE-2023-0710 The Metform Elementor Contact Form Builder for WordPress is vulnerable to Cross-Site Scripting by using the 'fname' attribute of the 'mf_thankyou' sh… Metform Elementor Contact Form Builder after 3.3.0 Fix from $1,6002023-06-09 MEDIUM 5.4 CVE-2023-0695 The Metform Elementor Contact Form Builder for WordPress is vulnerable to Cross-Site Scripting by using the 'mf' shortcode to echo unescaped form sub… Metform Elementor Contact Form Builder after 3.3.0 Fix from $1,6002023-06-09 MEDIUM 5.4 CVE-2023-0708 The Metform Elementor Contact Form Builder for WordPress is vulnerable to Cross-Site Scripting by using the 'mf_first_name' shortcode to echo unescap… Metform Elementor Contact Form Builder after 3.3.0 Fix from $1,6002023-06-09 MEDIUM 5.4 CVE-2023-0709 The Metform Elementor Contact Form Builder for WordPress is vulnerable to Cross-Site Scripting by using the 'mf_last_name' shortcode to echo unescape… Metform Elementor Contact Form Builder after 3.3.0 Fix from $1,6002023-06-09 MEDIUM 6.5 CVE-2023-0688 The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf_thankyou' shortcode in versions up to, a… Metform Elementor Contact Form Builder after 3.3.1 Fix from $1,6002023-06-09 HIGH 8.8 CVE-2022-45371 Cross-Site Request Forgery (CSRF) vulnerability in Wpmet ShopEngine plugin <= 4.1.1 versions. Shopengine after 4.1.1 Fix from $1,9502023-05-25 MEDIUM 6.1 CVE-2023-0084EPSS 29% The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via text areas on forms in versions up t… Metform Elementor Contact Form Builder after 3.1.2 Fix from $1,6002023-03-02 MEDIUM 5.3 CVE-2023-0085 The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to reCaptcha Bypass in versions up to, and including, 3.2.1. This is du… Metform Elementor Contact Form Builder after 3.2.1 Fix from $1,6002023-03-02 CRITICAL 9.8 CVE-2022-0788EPSS 8% The WP Fundraising Donation and Crowdfunding Platform WordPress plugin before 1.5.0 does not sanitise and escape a parameter before using it in a SQL… Fundengine 1.5.0+ Fix from $2,3002022-06-08 HIGH 7.5 CVE-2022-1442EPSS 9% The Metform WordPress plugin is vulnerable to sensitive information disclosure due to improper access control in the ~/core/forms/action.php file whi… Metform Elementor Contact Form Builder 2.1.4+ Fix from $1,9502022-05-10 MEDIUM 5.4 CVE-2021-24258 The Elements Kit Lite and Elements Kit Pro WordPress Plugins before 2.2.0 have a number of widgets that are vulnerable to stored Cross-Site Scripting… Elements Kit Elementor Addons 2.2.0+ Fix from $1,6002021-05-05