Elementsready Addons For Elementor (Quomodosoft) - vulnerabilities (CVEs)

9 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-04-16. Vendor: Quomodosoft.

CVEs of Elementsready Addons For Elementor

CVE-2025-39546 - CVSS 4.3 (medium), 2025-04-16: Cross-Site Request Forgery (CSRF) vulnerability in quomodosoft ElementsReady Addons for Elementor element-ready-lite allows Cross Site Request Forgery.This…
CVE-2024-10356 - CVSS 4.3 (medium), 2024-12-17: The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.4.8 in…
CVE-2024-54224 - CVSS 6.5 (medium), 2024-12-09: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in quomodosoft ElementsReady Addons for Elementor…
CVE-2024-51787 - CVSS 6.5 (medium), 2024-11-09: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in quomodosoft ElementsReady Addons for Elementor…
CVE-2024-9444 - CVSS 6.4 (medium), 2024-10-16: The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and…
CVE-2024-47353 - CVSS 6.1 (medium), 2024-10-11: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in quomodosoft ElementsReady Addons for Elementor element-ready-lite.This issue affects…
CVE-2024-47329 - CVSS 6.5 (medium), 2024-10-06: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in quomodosoft ElementsReady Addons for Elementor…
CVE-2024-5152 - CVSS 6.4 (medium), 2024-06-06: The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ parameter in all versions up to, and…
CVE-2024-34374 - CVSS 6.5 (medium), 2024-05-06: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuomodoSoft ElementsReady Addons for Elementor allows…