StaxWP

Products

Product	CVEs	Exploited	Latest
Stax Addons for Elementor	3	–	Apr 9, 2024
BuddyPress Builder for Elementor – BuddyBuilder	1	–	Nov 13, 2024
Elementor Addons, Widgets and Enhancements – Stax	1	–	Jul 6, 2024
Visibility Logic for Elementor	1	–	Jul 18, 2023

CVE-2024-10778 Medium 4.3 BuddyPress Builder for Elementor – BuddyBuilder <= 1.7.4 - Authenticated (Contributor+) Post Disclosure 0.5%
CVE-2024-37541 Medium 6.5 WordPress Elementor Addons, Widgets and Enhancements – Stax plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2024-3064 Medium 6.4 Elementor Addons, Widgets and Enhancements – Stax <= 1.4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
CVE-2022-47169 Medium 4.3 WordPress Visibility Logic for Elementor Plugin <= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
CVE-2023-1807 Medium 4.3 Elementor Addons, Widgets and Enhancements – Stax <= 1.4.3 - Cross-Site Request Forgery via toggle_widget 0.3%
CVE-2023-2189 Medium 4.3 Elementor Addons, Widgets and Enhancements – Stax <= 1.4.3 - Missing Authorization in toggle_widget 0.6%