VendorsLeap13premium_addonsall versions
Vulnerabilities

Leap13 Premium Addons

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2023-37869
WordPress Premium Addons PRO plugin <= 2.9.0 - Broken Access Control vulnerability
Published 2024-06-19 · Analyzed
8.8EPSS 0.006
CVE-2023-37868
WordPress Premium Addons PRO Plugin <= 2.9.0 is vulnerable to Sensitive Data Exposure
Published 2023-11-30 · Modified
6.5EPSS 0.007
CVE-2024-2000
Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multi Scroll Widget
Published 2024-03-13 · Modified
6.4EPSS 0.004
CVE-2024-2237
Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Global Badge Module
Published 2024-03-13 · Modified
6.4EPSS 0.004
CVE-2024-2238
Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Mouse Cursor Module
Published 2024-03-13 · Modified
6.4EPSS 0.004
CVE-2024-2239
Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Premium Magic Scroll Module
Published 2024-03-13 · Modified
6.4EPSS 0.004
CVE-2024-1997
Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Messenger Chat Widget
Published 2024-03-13 · Modified
6.4EPSS 0.004
CVE-2024-1996
Premium Addons for Elementor PRO <= 2.9.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget link
Published 2024-03-13 · Modified
6.4EPSS 0.004