2.7.20

DATE	CVE	VULNERABILITY TITLE	RISK
2024-06-13	CVE-2024-5787	Cross-site Scripting vulnerability in Ideabox Powerpack Addons for Elementor The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' attribute within the plugin's Link Effects widget in all versions up to, and including, 2.7.20 due to insufficient input sanitization and output escaping. network low complexity ideabox CWE-79	5.4
2023-12-14	CVE-2023-49739	Unspecified vulnerability in Ideabox Powerpack Addons for Elementor [PROBLEMTYPE] in [COMPONENT] in [VENDOR] [PRODUCT] [VERSION] on [PLATFORMS] allows [ATTACKER] to [IMPACT] via [VECTOR] network low complexity ideabox	6.1