MA
Vendor
Master-addons
17
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-0433 | MA Master Addons Master-addons | 5.4 | Mar 4 | Master Addons <= 2.0.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter |
| CVE-2024-9618 | MA Master Addons Master-addons | 5.4 | Mar 4 | Master Addons <= 2.0.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets |
| CVE-2024-9502 | MA Master Addons Master-addons | 5.4 | Jan 7 | Master Addons -- Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip Module |
| CVE-2024-6282 | MA Master Addons Master-addons | 5.4 | Sep 10 | Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via data-jltma-wrapper-link Element |
| CVE-2024-38710 | MA Master Addons Master-addons | 4.8 | Jul 20 | WordPress Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin <= 2.0.6.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-35660 | MA Master Addons Master-addons | 9.8 | Jun 9 | WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Broken Access Control on API vulnerability |
| CVE-2024-35688 | MA Master Addons Master-addons | 5.4 | Jun 8 | WordPress Master Addons for Elementor plugin <= 2.0.5.9 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-35702 | MA Master Addons Master-addons | 5.4 | Jun 8 | WordPress Master Addons for Elementor plugin <= 2.0.6.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-5382 | MA Master Addons Master-addons | 5.3 | Jun 7 | Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to MA Template Creation or Modification |
| CVE-2024-5542 | MA Master Addons Master-addons | 6.1 | Jun 7 | Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via Navigation Menu Widget |
| CVE-2024-5162 | PR Prettyphoto Master-addons | 5.4 | Jun 6 | WordPress prettyPhoto <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter |
| CVE-2024-3134 | MA Master Addons Master-addons | 5.4 | May 16 | Master Addons for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-4580 | MA Master Addons Master-addons | 5.4 | May 16 | Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-4265 | MA Master Addons Master-addons | 5.4 | May 2 | Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.5.9 - Contributor+ Stored Cross-Site Scripting |
| CVE-2024-33595 | MA Master Addons Master-addons | 8.8 | Apr 29 | WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Broken Access Control on Duplicate Post vulnerability |
| CVE-2024-29911 | MA Master Addons Master-addons | 5.4 | Mar 27 | WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-2139 | MA Master Addons Master-addons | 5.4 | Mar 27 | Master Addons for Elementor <= 2.0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget |
