wpdeveloper Vulnerability Advisory Catalog

Total 136 security vulnerabilities recorded for wpdeveloper software and firmware.

← Back to All Vendors
CVE-2024-0586 MEDIUM
Component: essential_addons_for_elementor

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross...

📅 2024-02-05
CVSS 6.4 Dossier →
CVE-2024-0585 MEDIUM
Component: essential_addons_for_elementor

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross...

📅 2024-02-05
CVSS 5.4 Dossier →
CVE-2023-6623 CRITICAL
Component: essential_blocks

The Essential Blocks WordPress plugin before 4.4.3 does not prevent unauthenticated attackers from overwriting local variables when rendering template...

📅 2024-01-15
CVSS 9.8 Dossier →
CVE-2023-7071 MEDIUM
Component: essential_blocks

The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the T...

📅 2024-01-11
CVSS 6.4 Dossier →
CVE-2023-7044 MEDIUM
Component: essential_addons_for_elementor

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross...

📅 2024-01-04
CVSS 6.4 Dossier →
CVE-2023-6986 MEDIUM
Component: embedpress

The EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor plugin for WordPress is ...

📅 2024-01-03
CVSS 6.4 Dossier →
Component: parallax_slider_block

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Parallax Slider Block allows Stored ...

📅 2023-12-15
CVSS 5.9 Dossier →
CVE-2023-5750 MEDIUM
Component: embedpress

The EmbedPress WordPress plugin before 3.9.2 does not sanitise and escape a parameter before outputting it back in the page containing a specific cont...

📅 2023-12-11
CVSS 6.1 Dossier →
CVE-2023-5749 MEDIUM
Component: embedpress

The EmbedPress WordPress plugin before 3.9.2 does not sanitise and escape user input before outputting it back in the page, leading to a Reflected Cro...

📅 2023-12-11
CVSS 6.1 Dossier →
Component: essential_addons_for_elementor

Cross-Site Request Forgery (CSRF) vulnerability in WPDeveloper Essential Addons for Elementor Pro.This issue affects Essential Addons for Elementor Pr...

📅 2023-11-18
CVSS 5.4 Dossier →
Component: reviewx

Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX – Multi-criteria Rating & Reviews for WooCommerce.This ...

📅 2023-11-07
CVSS 6.1 Dossier →
Component: essential_blocks

The Essential Blocks plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.2.0 via deserialization of untrust...

📅 2023-10-20
CVSS 8.1 Dossier →
Component: essential_blocks

The Essential Blocks plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.2.0 via deserialization of untrust...

📅 2023-10-20
CVSS 8.1 Dossier →
Component: essential_addons_for_elementor

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPDeveloper Essential Addons for Elementor Pro plugin <= 5.4.8 versions....

📅 2023-08-29
CVSS 7.1 Dossier →
CVE-2023-4283 MEDIUM
Component: embedpress

The EmbedPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'embedpress_calendar' shortcode in versions up to, and includ...

📅 2023-08-10
CVSS 6.4 Dossier →
CVE-2023-4282 MEDIUM
Component: embedpress

The EmbedPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'admin_post_remove' and 'remov...

📅 2023-08-10
CVSS 5.4 Dossier →
CVE-2023-3779 MEDIUM
Component: essential_addons_for_elementor

The Essential Addons For Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 5.8.1 du...

📅 2023-07-20
CVSS 5.3 Dossier →
Component: notificationx

The NotificationX plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.2. This is due to missing or ...

📅 2023-07-01
CVSS 4.3 Dossier →
CVE-2023-3371 MEDIUM
Component: embedpress

The EmbedPress plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on the 'lock_content_form_handler'...

📅 2023-06-27
CVSS 5.3 Dossier →
CVE-2023-2087 MEDIUM
Component: essential_blocks

The Essential Blocks plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.0.6. This is due to missing ...

📅 2023-06-09
CVSS 4.3 Dossier →
CVE-2023-2086 MEDIUM
Component: essential_blocks

The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the template_count f...

📅 2023-06-09
CVSS 4.3 Dossier →
CVE-2023-2085 MEDIUM
Component: essential_blocks

The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the templates functi...

📅 2023-06-09
CVSS 4.3 Dossier →
CVE-2023-2084 MEDIUM
Component: essential_blocks

The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the get function in ...

📅 2023-06-09
CVSS 4.3 Dossier →
CVE-2023-2083 MEDIUM
Component: essential_blocks

The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the save function in...

📅 2023-06-09
CVSS 4.3 Dossier →
Page 5 of 6 (136 Total Records)