CVE-2022-29455

概要

参考情報

• patchstack.com/database/vulnerability/elementor/wordpress-elementor-plugin-3-5-5-unauthenticated-dom-based-reflected-cross-site-scripting-xss-vulnerability · Third Party Advisory
• rotem-bar.com/hacking-65-million-websites-greater-cve-2022-29455-elementor · Broken Link
• wordpress.org/plugins/elementor · Release Notes

website builder のその他の脆弱性

• CVE-2025-8081中 4.9The Elementor plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.30.2 via the Import_Images::…
• CVE-2025-3075中 5.4The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plug…
• CVE-2024-54444中 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder el…
• CVE-2024-13445中 5.4The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bord…
• CVE-2024-8494中 6.5The Elementor Website Builder Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,…