Leap13

leap13

45 CVEs • 3 products

Products (3)

Click to collapse

Toggle

Premium Addons For Elementor

premium_addons_for_elementor

Premium Blocks For Gutenburg

premium_blocks_for_gutenburg

CVEs (45)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-1242 1Leap13 1Premium Addons For Elementor Apr 8, 2026 Feb 29, 2024 N/A· v4 6.4 MEDIUM· v3 N/A· v2 The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button onclick attribute in all versions up to, and including, 4.10.18 due to insufficient input sanitization and...Show more The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button onclick attribute in all versions up to, and including, 4.10.18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.Show less
CVE-2024-24831 1Leap13 1Premium Addons For Elementor Apr 23, 2026 Feb 10, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor.This issue affects Premium Addons for Elementor: from...Show more Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor.This issue affects Premium Addons for Elementor: from n/a through <= 4.10.16.Show less
CVE-2023-37868 1Leap13 1Premium Addons Apr 28, 2026 Nov 30, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Leap13 Premium Addons PRO.This issue affects Premium Addons PRO: from n/a through 2.9.0.
CVE-2023-34012 1Leap13 1Premium Addons For Elementor Nov 21, 2024 Jun 23, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Premium Addons for Elementor Premium Addons PRO plugin <= 2.8.24 versions.
CVE-2021-24257 1Leap13 1Premium Addons For Elementor Nov 21, 2024 May 5, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 The “Premium Addons for Elementor” WordPress Plugin before 4.2.8 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.