CVE Database /
CVE-2024-10784
CVE · Medium
CVE-2024-10784 — Unlimited Elements For Elementor [unlimited-elements-for-elementor] < 1.5.127
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-10784
|
Unlimited Elements For Elementor [unlimited-elements-for-elementor] < 1.5.127 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.4
|
< 1.5.127
|
1.5.127 |
2024-12-11 |
—
|
CVE-2024-10784
The Unlimited Elements For Elementor plugin for WordPress contains a stored cross-site scripting vulnerability in the Tile Gallery widget affecting versions up to and including 1.5.126. Authenticated users with Contributor-level permissions or higher can inject malicious scripts through inadequate input validation and output handling. These injected scripts execute in the browsers of any user viewing the affected pages, requiring an update to version 1.5.127 or later to remediate the flaw.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings