CVE-2024-8962
Published
CVSS v3
6.4
MEDIUM
CVSS v2
N/A
Affected
1
PROJECT
Description
The WPBITS Addons For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
<p>25 FREE WIDGETS and 60+ READY TO USE FREE TEMPLATES</p>
<p>The plugin comes with the following Elementor addons;</p>
<ol>
<li>Advanced Accordion – <a href="https://wpbits.net/demos/elementor-addons/accordion/" title="Advanced Accordion Demo" rel="nofollow ugc">DEMO</a></li>
<li>Banner Designer – <a href="https://wpbits.net/demos/elementor-addons/banner-designer/" title="Banner Designer" rel="nofollow ugc">DEMO</a></li>
<li>Business Hours – <a href="https://wpbits.net/demos/elementor-addons/business-hours/" title="Business Hours" rel="nofollow ugc">DEMO</a></li>
<li>Advanced Button – <a href="https://wpbits.net/demos/elementor-addons/buttons/" title="Advanced Button" rel="nofollow ugc">DEMO</a></li>
<li>Contact Form 7 – <a href="https://wpbits.net/demos/elementor-addons/contact-form-7/" title="Contact Form 7" rel="nofollow ugc">DEMO</a></li>
<li>Countdown – <a href="https://wpbits.net/demos/elementor-addons/countdown/" title="Countdown" rel="nofollow ugc">DEMO</a></li>
<li>Counter – <a href="https://wpbits.net/demos/elementor-addons/counter/" title="Counter" rel="nofollow ugc">DEMO</a></li>
<li>Dropdown Button – <a href="https://wpbits.net/demos/elementor-addons/dropdown-button/" title="Dropdown Button" rel="nofollow ugc">DEMO</a></li>
<li>Advanced Heading – <a href="https://wpbits.net/demos/elementor-addons/heading/" title="Advanced Heading" rel="nofollow ugc">DEMO</a></li>
<li>Login Form – <a href="https://wpbits.net/demos/elementor-addons/login-form/" title="Login Form" rel="nofollow ugc">DEMO</a></li>
<li>Photo Gallery – <a href="https://wpbits.net/demos/elementor-addons/photo-gallery/" title="Photo Gallery" rel="nofollow ugc">DEMO</a></li>
<li>Piechart – <a href="https://wpbits.net/demos/elementor-addons/piechart/" title="Piechart" rel="nofollow ugc">DEMO</a></li>
<li>Price Menu – <a href="https://wpbits.net/demos/elementor-addons/price-menu/" title="Price Menu" rel="nofollow ugc">DEMO</a></li>
<li>Price Table – <a href="https://wpbits.net/demos/elementor-addons/price-table/" title="Price Table" rel="nofollow ugc">DEMO</a></li>
<li>Progress Bar – <a href="https://wpbits.net/demos/elementor-addons/progress-bar/" title="Progress Bar" rel="nofollow ugc">DEMO</a></li>
<li>Custom Shape – <a href="https://wpbits.net/demos/elementor-addons/shape/" title="Custom Shape" rel="nofollow ugc">DEMO</a></li>
<li>Advanced Tabs – <a href="https://wpbits.net/demos/elementor-addons/tabs/" title="Advanced Tabs" rel="nofollow ugc">DEMO</a></li>
<li>Team Member – <a href="https://wpbits.net/demos/elementor-addons/team-member/" title="Team Member" rel="nofollow ugc">DEMO</a></li>
<li>Text Rotator – <a href="https://wpbits.net/demos/elementor-addons/text-rotator/" title="Text Rotator" rel="nofollow ugc">DEMO</a></li>
<li>Advanced Tooltip – <a href="https://wpbits.net/demos/elementor-addons/tooltip/" title="Advanced Tooltip" rel="nofollow ugc">DEMO</a></li>
<li>Logo Grid – <a href="https://wpbits.net/demos/elementor-addons/logo-grid/" title="Logo Grid" rel="nofollow ugc">DEMO</a></li>
<li>Image Compare – <a href="https://wpbits.net/demos/elementor-addons/image-compare/" title="Image Compare" rel="nofollow ugc">DEMO</a></li>
<li>Testimonial – <a href="https://wpbits.net/demos/elementor-addons/testimonial/" title="Testimonial" rel="nofollow ugc">DEMO</a></li>
<li>Timelines – <a href="https://wpbits.net/demos/elementor-addons/timeline/" title="Timeline" rel="nofollow ugc">DEMO</a></li>
<li>Hotspots – <a href="https://wpbits.net/demos/elementor-addons/hotspots/" title="Hotspots" rel="nofollow ugc">DEMO</a></li>
<li>Icon Box</li>
</ol>
<p>Pro Widgets & Features</p>
<ol>
<li>Slider – <a href="https://wpbits.net/demos/slider" title="Slider" rel="nofollow ugc">DEMO</a></li>
<li>Reveal Effects – <a href="https://wpbits.net/demos/reveal-effects" title="Reveal Effects" rel="nofollow ugc">DEMO</a></li>
<li>WooCommerce Carousel Master – <a href="https://wpbits.net/demos/woocommerce-carousel-master" title="WooCommerce Carousel Master" rel="nofollow ugc">DEMO</a></li>
<li>WooCommerce Grid Master – <a href="https://wpbits.net/demos/woocommerce-grid-master" title="WooCommerce Grid Master" rel="nofollow ugc">DEMO</a></li>
<li>Carousel Master – <a href="https://wpbits.net/demos/carousel-master" title="Carousel Master" rel="nofollow ugc">DEMO</a></li>
<li>Grid Master – <a href="https://wpbits.net/demos/grid-master" title="Grid Master" rel="nofollow ugc">DEMO</a></li>
<li>Scroll Effects – <a href="https://wpbits.net/demos/scroll-effects" title="Scroll Effects" rel="nofollow ugc">DEMO</a></li>
<li>CSS Animations – <a href="https://wpbits.net/demos/css-animations" title="CSS Animations" rel="nofollow ugc">DEMO</a></li>
<li>Image Effects – <a href="https://wpbits.net/demos/image-effects" title="Image Effects" rel="nofollow ugc">DEMO</a></li>
<li>Parallax Effects – <a href="https://wpbits.net/demos/parallax-effects" title="Parallax Effects" rel="nofollow ugc">DEMO</a></li>
<li>One Page Navigation – <a href="https://wpbits.net/demos/one-page-navigation" title="One Page Navigation" rel="nofollow ugc">DEMO</a></li>
<li>Flip Box – <a href="https://wpbits.net/demos/flip-box" title="Flip Box" rel="nofollow ugc">DEMO</a></li>
<li>Site Navigation – <a href="https://wpbits.net/demos/site-navigation" title="Site Navigation" rel="nofollow ugc">DEMO</a></li>
<li>Decorative Slideshows – <a href="https://wpbits.net/demos/decorative-slideshows" title="Decorative Slideshows" rel="nofollow ugc">DEMO</a></li>
<li>Theme Builder – <a href="https://wpbits.net/demos/theme-builder" title="Theme Builder" rel="nofollow ugc">DEMO</a></li>
</ol>
WordPress Plugin Directory