Input validation vulnerability in Premium Addons for Elementor 4.10.24

The Premium Addons for Elementor plugin for WordPress has a security issue that allows bad actors to inject malicious code into a website. This can occur when using the plugin’s Bullet List Widget and can affect all versions up to 4.10.24. The problem is due to the plugin not properly filtering and protecting user input, which means that attackers with certain levels of access can add their own code to a page and have it run when someone tries to edit the page.

Detected in:

Premium Addons for Elementor fixed vulnerable versions: >= * <= 4.10.24

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.