Nicheaddons Charity Addon For Elementor vulnerabilities

3 vulnerabilities

Known vulnerabilities in Nicheaddons Charity Addon For Elementor, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2024-51938nicheaddonscharity_addon_for_elementor+1
EPSS score
0.27%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Charity Addon for Elementor charity-addon-for-elementor allows DOM-Based XSS.This issue affects Charity Addon for Elementor: from n/a through <= 1.3.2.6.5CVE-2024-44026nicheaddonscharity_addon_for_elementor+1
EPSS score
0.28%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Charity Addon for Elementor charity-addon-for-elementor allows Stored XSS.This issue affects Charity Addon for Elementor: from n/a through <= 1.3.0.4.3CVE-2024-12062nicheaddonscharity_addon_for_elementor+1
EPSS score
0.31%
The Charity Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.3.3 via the 'nacharity_elementor_template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to.