Nalam-1
6 CVEs across 3 Nalam-1 products. Browse Nalam-1 vulnerabilities, severities, and proof-of-concept exploits.
Nalam-1 products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-12965 | Medium | 6.4 | 2025-12-12 | The Magical Posts Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mpac_title_tag' parameter in the Magical Posts Accordion w… |
CVE-2025-12964 | Medium | 6.4 | 2025-11-21 | The Magical Products Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mpdpr_title_tag' and 'mpdpr_subtitle_tag' parameters in… |
CVE-2025-8196 | Medium | 6.4 | 2025-07-29 | The Magical Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Custom Attributes in all versions up to, an… |
CVE-2024-10352 | Medium | 4.3 | 2024-11-09 | The Magical Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.4 via the get_c… |
CVE-2024-5161 | Medium | 6.4 | 2024-06-06 | The Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) plugin for WordPress is vulnerable to Stored Cr… |
CVE-2024-2923 | Medium | 6.4 | 2024-05-14 | The Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) plugin for WordPress is vulnerable to Stored Cr… |