7.1
Élevée
CVE-2025-24752 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Reflected XSS.This issue affects Essential Addons for Elementor: from n/a through <= 6.0.14.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Essential Addons for Elementor 6.0 | premières → 6.0.14 | Pas de correctif indiqué |
Autres CVE de Essential Addons for Elementor
Les 15 CVE de Essential Addons for Elementor →
CVE-2026-110898
Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor…
6.4
Moyenne
CVE-2026-102394
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper…
6.5
Moyenne
CVE-2026-81777
Authentication Bypass by Spoofing vulnerability in WPDeveloper Essential Addons for Elementor allows Identity Spoofing
5.3
Moyenne
CVE-2026-25440
Unauthenticated Broken Access Control in Essential Addons for Elementor < 6.6.0 versions
5.3
Moyenne