Skip to content
Sign in
6.4 Medium

CVE-2024-2139 The Master Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing…

Description

The Master Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing Table widget in all versions up to, and including, 2.0.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Affected products and versions

Product Affected versions Fixed in
Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor 2.0 earliest → 2.0.5.6 No fix stated
Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits 2.0 earliest → 2.0.5.6 No fix stated

Other CVEs of Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor

The 7 CVEs of Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor →
CVE-2024-6282 The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is… 5.4 Medium CVE-2024-5382 The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is… 6.5 Medium CVE-2024-5542 The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is… 7.2 High CVE-2024-3134 The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is… 6.4 Medium
Track this CVE