A popular plugin for WordPress called “140+ Widgets | Xpro Addons For Elementor” has a security issue that could put websites at risk. This is because the plugin does not properly clean up certain inputs and outputs, allowing attackers to insert harmful scripts into web pages. This could affect users with a certain level of access, from Contributor and above.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
