| Package | Affected versions | Patched versions |
|---|---|---|
| the plus addons for elementor | < 4.1.12 | 4.1.12 |
The theplus_more_post AJAX action of The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.12 did not properly sanitise some of its fields, leading to a reflected Cross-Site Scripting (exploitable on both unauthenticated and authenticated users)
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free