Vulnerabilities > Posimyth > THE Plus Addons FOR Elementor > 5.5.6
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2024-06-27 | CVE-2024-4983 | Cross-site Scripting vulnerability in Posimyth the Plus Addons for Elementor The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘video_color’ parameter in all versions up to, and including, 5.6.0 due to insufficient input sanitization and output escaping. | 5.4 |
2024-06-21 | CVE-2024-5455 | Unspecified vulnerability in Posimyth the Plus Addons for Elementor The Plus Addons for Elementor Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.5.4 via the 'magazine_style' parameter within the Dynamic Smart Showcase widget. | 8.8 |