WPDeveloper Vulnerabilities and Affected Products
Vulnerabilities associated with Essential Addons for Elementor Pro.
Products
Clear product- Essential Addons for Elementor11 vulnerabilities
- EmbedPress9 vulnerabilities
- Essential Blocks for Gutenberg8 vulnerabilities
- BetterDocs6 vulnerabilities
- essential_addons_for_elementor5 vulnerabilities
- Templately5 vulnerabilities
- NotificationX3 vulnerabilities
- BetterLinks2 vulnerabilities
- Essential Addons for Elementor Pro2 vulnerabilities
- essential_blocks2 vulnerabilities
- SchedulePress2 vulnerabilities
- Typing Text2 vulnerabilities
- Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More1 vulnerability
- Document Block – Upload & Embed Docs1 vulnerability
- Essential Addons for Elementor plugin for WordPress1 vulnerability
- Parallax Slider Block1 vulnerability
- ReviewX – Multi-criteria Rating & Reviews for WooCommerce1 vulnerability
- Secret Meta1 vulnerability
- Simple 301 Redirects by BetterLinks1 vulnerability
- simple_301_redirects1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-32245MEDIUM | WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Server Side Request Forgery (SSRF)Cross-Site Request Forgery (CSRF) vulnerability in WPDeveloper Essential Addons for Elementor Pro.This issue affects Essential Addons for Elementor Pro: from n/a through 5.4.8. CWE-352Nov 18, 2023 | CVSS5.4v3.1 | EPSS0.271% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-32241HIGH | WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Cross Site Scripting (XSS)Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPDeveloper Essential Addons for Elementor Pro plugin <= 5.4.8 versions. CWE-79Aug 29, 2023 | CVSS7.1v3.1 | EPSS0.371% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |