VendorsCodeastrologyultraaddonsany version
Vulnerabilities

Codeastrology UltraAddons any version

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

3CVEs
CVE-2024-37554
WordPress UltraAddons plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability
Published 2024-07-06 · Modified
6.5EPSS 0.002
CVE-2024-4866
UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Published 2024-07-10 · Modified
6.4EPSS 0.004
CVE-2024-10696
UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) <= 1.1.8 - Insecure Direct Object Reference to Sensitive Information Exposure via UA_Template Shortcode
Published 2024-11-21 · Modified
4.3EPSS 0.005