Vulnerabilities > Staxwp

DATE CVE VULNERABILITY TITLE RISK
2024-07-06 CVE-2024-37541 Unspecified vulnerability in Staxwp Stax
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in StaxWP Elementor Addons, Widgets and Enhancements – Stax allows Stored XSS.This issue affects Elementor Addons, Widgets and Enhancements – Stax: from n/a through 1.4.4.1.
network
low complexity
staxwp
5.4
2023-07-18 CVE-2022-47169 Unspecified vulnerability in Staxwp Visibility Logic for Elementor
Cross-Site Request Forgery (CSRF) vulnerability in StaxWP Visibility Logic for Elementor plugin <= 2.3.4 versions.
network
low complexity
staxwp
8.8
2023-06-09 CVE-2023-2189 Missing Authorization vulnerability in Staxwp Stax
The Elementor Addons, Widgets and Enhancements – Stax plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the toggle_widget function in versions up to, and including, 1.4.3.
network
low complexity
staxwp CWE-862
4.3
2023-06-09 CVE-2023-1807 Unspecified vulnerability in Staxwp Stax
The Elementor Addons, Widgets and Enhancements – Stax plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.3.
network
low complexity
staxwp
4.3