High
CVE-2024-50453
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
Medium
CVE-2024-10050
Elementor Header & Footer Builder <= 1.6.43 - Authenticated (Contributor+) Information Disclosure via Shortcode
Medium
CVE-2024-9530
Qi Addons For Elementor <= 1.8.0 - Sensitive Information Exposure
Medium
CVE-2024-9541
News Kit Elementor Addons <= 1.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Canvas Menu Elementor Template
Medium
CVE-2024-49679
WPKoi Templates for Elementor <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49667
Local Business Addons For Elementor <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49654
Extra Privacy for Elementor <= 0.1.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-49665
Web Bricks Addons for Elementor <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49693
Mega Elements <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49702
myCred Elementor <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-49676
Custom Icons for Elementor <= 0.3.3 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2024-9889
ElementInvader Addons for Elementor <= 1.2.9 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2024-49630
WP Education <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via text_html_tag
Medium
CVE-2024-49631
Easy Addons for Elementor <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-7417
Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosure
Medium
CVE-2024-8921
Zita Elementor Site Library <= 1.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9444
ElementsReady Addons for Elementor <= 6.4.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9888
ElementInvader Addons for Elementor <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49277
UltraAddons Elementor Lite <= 2.0.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-9540
Sina Extension for Elementor <= 3.5.7 - Authenticated (Contributor+) Sensitive Information Exposure via Sina Modal Box Widget Elementor Template
Medium
CVE-2024-49319
Awesome Contact Form7 for Elementor <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49310
Themesflat Addons For Elementor <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49292
Exclusive Addons Elementor <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-6757
Elementor <= 3.23.5 - Authenticated (Contributor+) Basic Information Exposure via get_image_alt Function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.