Vulnerabilities > Wowdevs > High

DATE CVE VULNERABILITY TITLE RISK
2024-11-22 CVE-2024-11104 Missing Authorization vulnerability in Wowdevs SKY Addons for Elementor
The Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the save_options() function in all versions up to, and including, 2.6.2.
network
low complexity
wowdevs CWE-862
8.1
2024-11-22 CVE-2024-11601 Missing Authorization vulnerability in Wowdevs SKY Addons for Elementor
The Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blog, Video Gallery) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.1.
network
low complexity
wowdevs CWE-862
8.1