Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

EleSpare – News, Magazine and Blog Addons for Elementor — Vulnerabilities & Security Advisories 2

All 2 CVE vulnerabilities found in EleSpare – News, Magazine and Blog Addons for Elementor, with AI-generated Chinese analysis, references, and POCs.

Vendor: elespare

CVE IDTitleCVSSSeverityPublished
CVE-2024-4615 Elespare – Blog, Magazine and Newspaper Addons for Elementor with Templates, Widgets, Kits, and Header/Footer Builder. One Click Import: No Coding Required! <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Horizontal Nav Menu Widget CWE-79 6.4 Medium2024-06-13
CVE-2024-0900 Elespare – Build Your Blog, News & Magazine Websites with Expert-Designed Template Kits. One Click Import: No Coding Skills Required! <= 2.1.2 - Missing Authorization to Subscriber+ Arbitrary Post Creation CWE-862 4.3 Medium2024-04-23

All 2 known CVE vulnerabilities affecting EleSpare – News, Magazine and Blog Addons for Elementor with full Chinese analysis, references, and POCs where available.