Input validation vulnerability in IntelliWidget Elements 2.2.7

The IntelliWidget Elements plugin for WordPress has a security issue called Stored Cross-Site Scripting. This can happen in versions up to, and including, 2.2.7 because the plugin doesn’t properly protect against harmful input and output. This means that hackers who are logged in as contributors or higher can insert dangerous web scripts into pages. These scripts will run whenever someone visits the page with the injected script.

Detected in:

IntelliWidget Elements open vulnerable versions: >= * <= 2.2.7

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.