CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-9657 | Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons [bdthemes-element-pack-lite] < 5.10.3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 5.10.3 | 5.10.3 | 2024-11-04 | — |
The Element Pack Elementor Addons plugin for WordPress contains a security flaw affecting versions 5.10.2 and earlier. The issue arises from inadequate validation of input data passed via the 'tooltip' parameter, allowing malicious users with Contributor-level access or higher to embed unauthorized scripts that will run when accessed by other users.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.