Log out
Get PRO

Latest

Input validation vulnerability in ElementInvader Addons for Elementor 1.2.8

  • Severity: medium-risk
  • Status: Fixed
  • Publication: October 15, 2024

The ElementInvader Addons for Elementor plugin on WordPress has a security issue called Stored Cross-Site Scripting. This happens when the plugin’s contact form widget redirect URL is not properly checked for harmful content and then displayed on the website. It affects all versions of the plugin up to 1.2.8. This vulnerability allows attackers who have contributor-level access or higher to insert harmful code on pages, which will run whenever someone visits that page.

Detected in:

ElementInvader Addons for Elementor fixed vulnerable versions: >= * <= 1.2.8

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.