CVE-2021-24266

MEDIO 5.4CVE-2021-24266 · Published 05/05/2021 · updated 17/06/2026

In breve

CVE-2021-24266 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda the plus addons for elementor page builder lite (posimyth).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.59%, superiore al 48.2% delle vulnerabilità.
Correzione: aggiornare a 2.0.6 o successiva.

Package	Affected versions	Patched versions
the plus addons for elementor page builder lite posimyth	`< 2.0.6`	`2.0.6`

Description

The “The Plus Addons for Elementor Page Builder Lite” WordPress Plugin before 2.0.6 has four widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.

References

wpscan.com/vulnerability/78014ddd-1cc2-4723-8194-4bf478888578 · Third Party Advisory
wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free