Ideaboxcreations

12 CVEs across 2 Ideaboxcreations products. Browse Ideaboxcreations vulnerabilities, severities, and proof-of-concept exploits.

Ideaboxcreations products with known CVEs

ProductCVEs
Powerpack Addons For Elementor (Free Widgets, Extensions And Templates)10
Powerpack Lite For Beaver Builder2
Ideaboxcreations CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-8388Medium6.42025-09-10The PowerPack Elementor Addons (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘cursor_url’…
CVE-2025-1512Medium6.42025-04-01The PowerPack Elementor Addons (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom Cursor…
CVE-2024-12239Medium6.12024-12-17The PowerPack Lite for Beaver Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the navigate parameter in all versions up to, an…
CVE-2024-10692Medium4.32024-12-06The PowerPack Elementor Addons (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Information Exposure in all versions up to, and i…
CVE-2024-5787Medium6.42024-06-13The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' att…
CVE-2024-5327Medium6.42024-05-30The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the…
CVE-2024-2492Medium6.42024-04-09The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Twitter Tweet widget in all versions up to, and in…
CVE-2024-2289Medium6.42024-04-09The PowerPack Lite for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link in multiple elements in all versions up to…
CVE-2024-2491Medium6.42024-03-30The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the *_html_tag* attribute of multiple widgets in all v…
CVE-2024-1411Medium6.42024-02-29The PowerPack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the settings of the Twitter Buttons Widget in all vers…
CVE-2024-1055Medium5.42024-02-07The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
CVE-2023-6984Medium5.32024-01-03The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up…