Nicheaddons vulnerabilities, page 2
26 vulnerabilities
Known vulnerabilities in Nicheaddons products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 11 products.
CVE-2024-49259nicheaddonsprimary_addon_for_elementor+1
EPSS score0.28%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Primary Addon for Elementor primary-addon-for-elementor allows Stored XSS.This issue affects Primary Addon for Elementor: from n/a through <= 1.5.8.CVE-2024-12046nicheaddonsmedical addon for elementor+1EPSS score0.43%
The Medical Addon for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.6.2 via the 'namedical_elementor_template' shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the content of draft, pending, and private posts.CVE-2024-12062nicheaddonscharity_addon_for_elementor+1EPSS score0.31%
The Charity Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.3.3 via the 'nacharity_elementor_template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to.CVE-2024-12061nicheaddonsevents_addon_for_elementor+1EPSS score0.39%
The Events Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2.3 via the naevents_elementor_template shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to.CVE-2023-47827nicheaddonsevents_addon_for_elementor+1EPSS score0.48%
Incorrect Authorization vulnerability in NicheAddons Events Addon for Elementor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Events Addon for Elementor: from n/a through 2.1.3.CVE-2023-47826nicheaddonsrestaurant_\&_cafe_addon_for_elementor+1EPSS score0.49%
Missing Authorization vulnerability in NicheAddons Restaurant & Cafe Addon for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restaurant & Cafe Addon for Elementor: from n/a through 1.5.3.