CVE-2021-24267

概要

参考情報

• wpscan.com/vulnerability/0c96f3a1-d192-481f-9035-5393f4aadc19 · Exploit
• wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem · Third Party Advisory

all-in-one addons for elementor のその他の脆弱性

• CVE-2025-2330中 5.4The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button+m…
• CVE-2024-10321中 4.3The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, …
• CVE-2024-37428中 5.4Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themesgrove WidgetKit allows St…
• CVE-2024-2137中 5.4The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple pricing widge…
• CVE-2022-4256中 4.8The All-in-One Addons for Elementor WordPress plugin before 2.4.4 does not sanitise and escape some of its settings, which could allow high …