VendorswowDevssky_addons_for_elementorall versions
Vulnerabilities

wowDevs Sky Addons for Elementor

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

7CVEs
CVE-2024-11104
Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) <= 2.6.2 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update
Published 2024-11-22 · Analyzed
8.1EPSS 0.007
CVE-2024-11601
Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) <= 2.6.1 - Cross-Site Request Forgery to Limited Arbitrary Options Update
Published 2024-11-22 · Analyzed
8.1EPSS 0.003
CVE-2024-38687
WordPress Sky Addons for Elementor plugin <= 2.5.5 - Cross Site Scripting (XSS) vulnerability
Published 2024-07-20 · Modified
6.5EPSS 0.003
CVE-2024-47332
WordPress Sky Addons for Elementor plugin <= 2.5.11 - Cross Site Scripting (XSS) vulnerability
Published 2024-10-06 · Modified
6.5EPSS 0.003
CVE-2024-50433
WordPress Sky Addons for Elementor plugin <= 2.5.15 - Cross Site Scripting (XSS) vulnerability
Published 2024-10-28 · Modified
6.5EPSS 0.003
CVE-2024-2286
Sky Addons for Elementor <= 2.4.0 - Authenticated(Contributor+) Stored Cross-site scripting via Wrapper Link URL
Published 2024-03-13 · Modified
6.4EPSS 0.004
CVE-2024-9542
Sky Addons for Elementor <= 2.6.1 - Authenticated (Contributor+) Sensitive Information Exposure via Content Switcher Widget Elementor Template
Published 2024-11-21 · Analyzed
4.3EPSS 0.003