Wpvibes vulnerabilities
49 CVEs and advisories name Wpvibes as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-2092Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widget
- CVE-2024-3743Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-2792Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Text Separator' and 'Image Compare' Widget
- CVE-2024-30422WordPress Elementor Addon Elements plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-2091Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-29107WordPress Elementor Addon Elements plugin <= 1.12.10 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-1393Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Switcher Widget
- CVE-2024-1391Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Thumbnail Slider Widget
- CVE-2024-1422Elementor Addon Elements <= 1.12.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Modal Popup effet
- CVE-2024-1392Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dual Button Widget
- CVE-2024-1358Elementor Addon Elements <= 1.12.12 - Directory Traversal to Local File Inclusion
- CVE-2023-51410WordPress WP Mail Log Plugin <= 1.1.2 is vulnerable to Arbitrary File Upload
- CVE-2023-47530WordPress Redirect 404 Error Page to Homepage or Custom Page with Logs Plugin <= 1.8.7 is vulnerable to SQL Injection
- CVE-2023-4690Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery
- CVE-2023-5381Elementor Addon Elements <= 1.12.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2023-4723Elementor Addon Elements <= 1.12.7 - Missing Authorization to Sensitive Information Exposure
- CVE-2023-4689Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery
- CVE-2023-3088WP Mail Log <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting via Email
- CVE-2022-45807WordPress WP Mail Log Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)