Medium
CVE-2023-38480
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
Medium
CVE-2023-38518
Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg <= 1.4.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-3779
Essential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure
Medium
CVE-2022-4953
Elementor <= 3.5.4 - DOM-Based iFrame Injection
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Medium
CVE-2023-3709
Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosure
High
CVE-2023-37982
Integration for Contact Form 7 and Salesforce <= 1.3.3 - Open Redirect
Medium
CVE-2023-37868
Premium Addons PRO <= 2.9.0 - Sensitive Information Exposure
Medium
CVE-2023-37869
Premium Addons PRO <= 2.9.0 - Missing Authorization
Medium
23924342-3b1d-4360-bd87-104091283e35
BuddyBuilder - BuddyPress Builder for Elementor <= 1.7.3 - Cross-Site Request Forgery
Critical
CVE-2023-37999
HT Mega – Absolute Addons for Elementor <= 2.2.0 - Missing Authorization to Privilege Escalation
Medium
CVE-2022-47169
Visibility Logic for Elementor <= 2.3.4 - Cross-Site Request Forgery via toggle_option
Medium
72c04de6-78d2-4a45-834a-01ed879b528f
Visibility Logic for Elementor <= 2.3.4 - Missing Authorization via admin_post 'toggle_option'
Medium
CVE-2023-2517
Metform Elementor Contact Form Builder <= 3.3.2 - Cross-Site Request Forgery via permalink_setup
Medium
CVE-2023-31080
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.65 - Missing Authorization
Medium
CVE-2023-35050
Elementor Pro <= 3.13.0 - Missing Authorization
High
CVE-2023-3295
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2023-2324
Elementor Forms Google Sheet Connector <= 1.0.6 - Reflected Cross-Site Scripting via 'code'
Medium
CVE-2023-0692
Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_payment_status' shortcode
High
CVE-2023-0721
Metform Elementor Contact Form Builder <= 3.3.0 - Unauthenticated CSV Injection
Medium
CVE-2023-1807
Elementor Addons, Widgets and Enhancements – Stax <= 1.4.3 - Cross-Site Request Forgery via toggle_widget
Medium
CVE-2023-0708
Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_first_name shortcode
Medium
CVE-2023-2189
Elementor Addons, Widgets and Enhancements – Stax <= 1.4.3 - Missing Authorization in toggle_widget
Medium
CVE-2023-0691
Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_last_name shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.