elespare
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| EleSpare – News, Magazine and Blog Addons for Elementor | 2 | – | Jun 13, 2024 |
Exploited and recent CVEs
- CVE-2024-4615 Elespare – Blog, Magazine and Newspaper Addons for Elementor with Templates, Widgets, Kits, and Header/Footer Builder. One Click Import: No Coding Required! <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Horizontal Nav Menu Widget 0.4%
- CVE-2024-0900 Elespare – Build Your Blog, News & Magazine Websites with Expert-Designed Template Kits. One Click Import: No Coding Skills Required! <= 2.1.2 - Missing Authorization to Subscriber+ Arbitrary Post Creation 0.4%