Elementsready (Quomodosoft) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 147 known versions, newest CVE from 2024-12-17. Vendor: Quomodosoft.

CVEs of Elementsready

• CVE-2024-10356 - CVSS 4.3 (medium), 2024-12-17: The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.4.8 in…
• CVE-2024-54224 - CVSS 6.5 (medium), 2024-12-09: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in quomodosoft ElementsReady Addons for Elementor…
• CVE-2024-51787 - CVSS 6.5 (medium), 2024-11-09: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in quomodosoft ElementsReady Addons for Elementor…
• CVE-2024-9444 - CVSS 6.4 (medium), 2024-10-16: The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and…
• CVE-2024-47353 - CVSS 6.1 (medium), 2024-10-11: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in quomodosoft ElementsReady Addons for Elementor element-ready-lite.This issue affects…
• CVE-2024-47329 - CVSS 6.5 (medium), 2024-10-06: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in quomodosoft ElementsReady Addons for Elementor…
• CVE-2024-5152 - CVSS 6.4 (medium), 2024-06-06: The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ parameter in all versions up to, and…
• CVE-2024-34374 - CVSS 6.5 (medium), 2024-05-06: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuomodoSoft ElementsReady Addons for Elementor allows…