Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Brainstormforce Subscribe
Filtered by product Ultimate Addons For Elementor
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-13125 1 Brainstormforce 1 Ultimate Addons For Elementor 2021-07-21 6.4 MEDIUM 6.5 MEDIUM
An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13126. Unauthenticated attackers can create users with the Subscriber role even if registration is disabled.
CVE-2021-24271 1 Brainstormforce 1 Ultimate Addons For Elementor 2021-05-21 3.5 LOW 5.4 MEDIUM
The “Ultimate Addons for Elementor” WordPress Plugin before 1.30.0 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.