VYPR

Elementor Addons

by Livemeshthemes

CVEs (2)

  • CVE-2024-37547MedJul 6, 2024
    risk 0.42cvss 6.5epss 0.01

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Livemesh Livemesh Addons for Elementor.This issue affects Livemesh Addons for Elementor: from n/a through 8.4.0.

  • CVE-2024-0448MedFeb 5, 2024
    risk 0.42cvss 6.4epss 0.01

    The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widget URL parameters in all versions up to, and including, 8.3.1 due to insufficient input sanitization and output escaping. This makes it possible for…