cleantalk
Vulnerabilities and Security Researches

Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, , 4846b71dd684449e23b986d8eea7436789ea293f

Published on
Jul 18, 2023
Research Description
Element Pack Addons for Elementor &#8211; Best Elementor addons with Ready Templates, Blocks, Widgets and WooCommerce Builder [bdthemes-element-pack-lite] < 5.2.1 WordPress Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) Plugin <= 5.2.0 is vulnerable to Cross Site Scripting (XSS) Update the WordPress Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) plugin to the latest available version (at least 5.2.1). Rafie Muhammad (Patchstack) discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 5.2.1.
Affected versions
max 5.2.1.
Status
vulnerable