QwikSec

Security Database

CVE

CWE

Training

CVE-2021-24263

Published: May 5, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

The “Elementor Addons – PowerPack Addons for Elementor” WordPress Plugin before 2.3.2 for WordPress has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.

Vendor	Product	Versions
Unknown	PowerPack Addons for Elementor	affected `2.3.2 - < 2.3.2`

Weaknesses (CWE)

References

https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/

x_refsource_MISC

https://wpscan.com/vulnerability/48876006-b00f-49b7-80a1-b1d6dc2f4eec

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.