CVE-2024-10321

概要

参考情報

• plugins.trac.wordpress.org/browser/widgetkit-for-elementor/trunk/elements/advanced-tab/template/view.php · Product
• wordfence.com/threat-intel/vulnerabilities/id/2e470017-c453-435d-8342-66874a794537 · Third Party Advisory

all-in-one addons for elementor のその他の脆弱性

• CVE-2025-2330中 5.4The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button+m…
• CVE-2024-37428中 5.4Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themesgrove WidgetKit allows St…
• CVE-2024-2137中 5.4The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple pricing widge…
• CVE-2022-4256中 4.8The All-in-One Addons for Elementor WordPress plugin before 2.4.4 does not sanitise and escape some of its settings, which could allow high …
• CVE-2021-24267中 5.4The “All-in-One Addons for Elementor – WidgetKit” WordPress Plugin before 2.3.10 has several widgets that are vulnerable to stored Cross-Sit…