Vulnerabilities > Posimyth
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-11-06 | CVE-2023-45657 | SQL Injection vulnerability in Posimyth Nexter Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSIMYTH Nexter allows SQL Injection.This issue affects Nexter: from n/a through 2.0.3. | 9.8 |
| 2023-10-25 | CVE-2023-45750 | Cross-site Scripting vulnerability in Posimyth Nexter Extension 2.0.3 Unauth. | 6.1 |
| 2023-03-07 | CVE-2021-4331 | Unspecified vulnerability in Posimyth the Plus Addons for Elementor The Plus Addons for Elementor plugin for WordPress is vulnerable to privilege escalation in versions up to, and including 4.1.9 (pro) and 2.0.6 (free). | 8.8 |
| 2023-03-07 | CVE-2021-4332 | Unspecified vulnerability in Posimyth the Plus Addons for Elementor The Plus Addons for Elementor plugin for WordPress is vulnerable to arbitrary file reads in versions up to, and including 4.1.9 (pro) and 2.0.6 (free). | 6.5 |
| 2022-01-10 | CVE-2021-24948 | Injection vulnerability in Posimyth the Plus Addons for Elementor The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not validate the qvquery parameter of the tp_get_dl_post_info_ajax AJAX action, which could allow unauthenticated users to retrieve sensitive information, such as private and draft posts | 7.5 |
| 2022-01-10 | CVE-2021-24949 | SQL Injection vulnerability in Posimyth the Plus Addons for Elementor The "WP Search Filters" widget of The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not sanitise and escape the option parameter before using it in a SQL statement, which could lead to SQL injection | 9.8 |
| 2021-06-14 | CVE-2021-24351 | Cross-site Scripting vulnerability in Posimyth the Plus Addons for Elementor The theplus_more_post AJAX action of The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.12 did not properly sanitise some of its fields, leading to a reflected Cross-Site Scripting (exploitable on both unauthenticated and authenticated users) | 6.1 |
| 2021-06-14 | CVE-2021-24358 | Open Redirect vulnerability in Posimyth the Plus Addons for Elementor The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.10 did not validate a redirect parameter on a specifically crafted URL before redirecting the user to it, leading to an Open Redirect issue. | 6.1 |
| 2021-06-14 | CVE-2021-24359 | Improper Authentication vulnerability in Posimyth the Plus Addons for Elementor The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.11 did not properly check that a user requesting a password reset was the legitimate user, allowing an attacker to send an arbitrary reset password email to a registered user on behalf of the WordPress site. | 5.3 |
| 2021-05-05 | CVE-2021-24266 | Cross-site Scripting vulnerability in Posimyth the Plus Addons for Elementor Page Builder Lite The “The Plus Addons for Elementor Page Builder Lite” WordPress Plugin before 2.0.6 has four widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method. | 5.4 |