CVE-2024-12239 | Medium | 6.1 | 2024-12-17 | The PowerPack Lite for Beaver Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the navigate parameter in all versions up to, an… |
CVE-2024-43330 | High | 7.1 | 2024-08-18 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack for Beaver Builder all… |
CVE-2024-39634 | High | 8.8 | 2024-08-01 | Improper Privilege Management vulnerability in IdeaBox PowerPack Pro for Elementor allows Privilege Escalation.This issue affects PowerPack Pro for Elementor… |
CVE-2024-39633 | High | 8.8 | 2024-08-01 | Improper Privilege Management vulnerability in IdeaBox PowerPack for Beaver Builder allows Privilege Escalation.This issue affects PowerPack for Beaver Builder… |
CVE-2024-37409 | Medium | 5.9 | 2024-07-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder power… |
CVE-2024-37410 | Medium | 4.9 | 2024-07-09 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in IdeaBox Creations PowerPack Lite for B… |
CVE-2024-5787 | Medium | 6.4 | 2024-06-13 | The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' att… |
CVE-2024-3668 | High | 8.8 | 2024-06-08 | The PowerPack Pro for Elementor plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.10.17. This is due to the pl… |
CVE-2024-5327 | Medium | 6.4 | 2024-05-30 | The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the… |
CVE-2024-2492 | Medium | 6.4 | 2024-04-09 | The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Twitter Tweet widget in all versions up to, and in… |
CVE-2024-2289 | Medium | 6.4 | 2024-04-09 | The PowerPack Lite for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link in multiple elements in all versions up to… |
CVE-2024-2491 | Medium | 6.4 | 2024-03-30 | The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the *_html_tag* attribute of multiple widgets in all v… |
CVE-2024-1411 | Medium | 6.4 | 2024-02-29 | The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the settings of the Twitter Buttons Widget in all vers… |
CVE-2024-1055 | Medium | 5.4 | 2024-02-07 | The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… |
CVE-2023-6984 | Medium | 5.3 | 2024-01-03 | The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up… |
CVE-2023-49739 | High | 7.1 | 2023-12-14 | Vulnerability in IdeaBox Creations PowerPack Pro for Elementor.This issue affects PowerPack Pro for Elementor: from n/a through 2.9.23. |
CVE-2022-0176 | Medium | 6.1 | 2022-02-14 | The PowerPack Lite for Beaver Builder WordPress plugin before 1.2.9.3 does not sanitise and escape the tab parameter before outputting it back in an admin page… |
CVE-2021-25027 | Medium | 6.1 | 2022-01-03 | The PowerPack Addons for Elementor WordPress plugin before 2.6.2 does not escape the tab parameter before outputting it back in an attribute in the admin dashb… |
CVE-2021-24263 | Medium | 5.4 | 2021-05-05 | The “Elementor Addons – PowerPack Addons for Elementor” WordPress Plugin before 2.3.2 for WordPress has several widgets that are vulnerable to stored Cross-Sit… |