Show filters
202 Total Results
Displaying 191-200 of 202
Sort by:
Attacker Value
Unknown
CVE-2020-13864
Disclosure Date: June 05, 2020 (last updated February 21, 2025)
The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from a stored XSS vulnerability. An author user can create posts that result in a stored XSS by using a crafted payload in custom links.
0
Attacker Value
Unknown
CVE-2020-13642
Disclosure Date: May 28, 2020 (last updated February 21, 2025)
An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The action_builder_content function did not do any nonce verification, allowing for requests to be forged on behalf of an administrator. The panels_data $_POST variable allows for malicious JavaScript to be executed in the victim's browser.
0
Attacker Value
Unknown
CVE-2020-13643
Disclosure Date: May 28, 2020 (last updated February 21, 2025)
An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The live editor feature did not do any nonce verification, allowing for requests to be forged on behalf of an administrator. The live_editor_panels_data $_POST variable allows for malicious JavaScript to be executed in the victim's browser.
0
Attacker Value
Unknown
CVE-2020-13126
Disclosure Date: May 17, 2020 (last updated February 21, 2025)
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13125. An attacker with the Subscriber role can upload arbitrary executable files to achieve remote code execution. NOTE: the free Elementor plugin is unaffected.
0
Attacker Value
Unknown
CVE-2020-7055
Disclosure Date: April 22, 2020 (last updated February 21, 2025)
An issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor Import Templates function, allowing an attacker to execute code via a crafted ZIP archive.
0
Attacker Value
Unknown
CVE-2018-18379
Disclosure Date: October 07, 2019 (last updated November 27, 2024)
The elementor-edit-template class in wp-admin/customize.php in the Elementor Pro plugin before 2.0.10 for WordPress has XSS.
0
Attacker Value
Unknown
CVE-2017-18596
Disclosure Date: September 10, 2019 (last updated November 27, 2024)
The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions.
0
Attacker Value
Unknown
CVE-2019-15821
Disclosure Date: August 30, 2019 (last updated November 27, 2024)
The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data.
0
Attacker Value
Unknown
CVE-2019-15771
Disclosure Date: August 29, 2019 (last updated November 27, 2024)
The nd-shortcodes plugin before 6.0 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
0
Attacker Value
Unknown
CVE-2019-12139
Disclosure Date: May 16, 2019 (last updated November 27, 2024)
An XSS issue was discovered in the Admin UI in eZ Platform 2.x. This affects ezplatform-admin-ui 1.3.x before 1.3.5 and 1.4.x before 1.4.4, and ezplatform-page-builder 1.1.x before 1.1.5 and 1.2.x before 1.2.4.
0
