Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2024-05-15	CVE-2024-4370	Cross-site Scripting vulnerability in Wpzoom Elementor Addons The WPZOOM Addons for Elementor (Templates, Widgets) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widget Image Box in all versions up to, and including, 1.1.36 due to insufficient input sanitization and output escaping on user supplied attributes. network low complexity wpzoom CWE-79	5.4
2024-04-29	CVE-2024-33539	Unspecified vulnerability in Wpzoom Elementor Addons Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM WPZOOM Addons for Elementor (Templates, Widgets) allows Stored XSS.This issue affects WPZOOM Addons for Elementor (Templates, Widgets): from n/a through 1.1.35. network low complexity wpzoom	5.4