WordPress Plugin Vulnerabilities | Page 17 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2024-03-26

Title

Master Addons for Elementor < 2.0.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget

Slug

Published

2024-03-25

Title

Master Addons for Elementor < 2.0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2024-04-29

Title

Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor < 2.0.6.0 - Contributor+ Stored Cross-Site Scripting

Slug

Published

2024-04-25

Title

Master Addons for Elementor < 2.0.5.6 - Missing Authorization on Duplicate Post

Slug

Published

2024-05-15

Title

Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor < 2.0.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2024-05-16

Title

Master Addons for Elementor < 2.0.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2024-06-06

Title

Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor < 2.0.6.2 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via Navigation Menu Widget

Slug

Published

2024-06-06

Title

Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor < 2.0.6.2 - Missing Authorization to MA Template Creation or Modification

Slug

Published

2024-06-03

Title

Master Addons for Elementor < 2.0.5.6 - Missing Authorization via get_jltma_save_menuitem_settings()

Slug

Published

2024-07-11

Title

Master Addons for Elementor < 2.0.6.3 - Authenticated (Author+) Stored Cross-Site Scripting

Slug

Published

2024-09-09

Title

Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor < 2.0.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via data-jltma-wrapper-link Element

Slug

Published

2024-11-11

Title

Master Addons for Elementor < 2.1.0 - Author+ Stored XSS

Slug

Published

2025-01-06

Title

Master Addons -- Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor < 2.0.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip Module

Slug

Published

2025-03-03

Title

Master Addons < 2.0.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

Slug

Published

2025-03-03

Title

Master Addons < 2.0.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

Slug

Published

2025-07-15

Title

Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations < 2.0.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2025-08-11

Title

Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations < 2.0.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox

Slug

Published

2025-12-05

Title

Master Addons for Elementor < 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2025-12-31

Title

Master Addons for Elementor < 2.1.0 - Unauthenticated Insecure Direct Object Reference

Slug

Published

2026-02-19

Title

Master Addons For Elementor < 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ma_el_bh_table_btn_text'

Slug

Published

2026-03-16

Title

Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits < 2.1.4 - Authenticated (Author+) Stored Cross-Site Scripting

Slug

Published

2026-04-30

Title

Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter

Slug

master-addons-pro

Published

2026-03-02

Title

Master Addons for Elementor Premium < 2.1.4 - Authenticated (Subscriber+) Remote Code Execution via render_preview

Slug

Published

2024-11-04

Title

Master Bar <= 1.0 - Reflected Cross-Site Scripting

Slug

Published

2022-02-28

Title

Unauthorised AJAX Calls via Freemius