Skip to content
Litonice13 vulnerabilities
Newest
-
litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits
Master Addons For Elementor <= 3.1.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'jtlma_custom_js' Page Setting (Custom JS Extension)
CVE-2026-9281
6.4 Medium
-
100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 more
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
CVE-2024-13362
6.1 Medium
-
litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits
Master Addons For Elementor <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ma_el_bh_table_btn_text'
CVE-2026-2486
6.4 Medium
-
litonice13 wp adminify – white label wordpress, admin menu editor, login customizer
WP Adminify <= 4.0.7.7 - Unauthenticated Sensitive Information Exposure via 'get-addons-list' REST API
CVE-2026-1060
5.3 Medium
-
litonice13 content locker for elementor, image comparison addon for elementor, image hover effects for elementor +1 more +3 more
Multiple Plugins <= Multiple Versions - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload
CVE-2025-10896
8.8 High
-
litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits
Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox
CVE-2025-8874
6.4 Medium
-
litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits
Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-5284
6.4 Medium
-
master-addons master addons, litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits +1 more
Master Addons <= 2.0.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
CVE-2025-0433
6.4 Medium
-
master-addons master addons, litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits +1 more
Master Addons <= 2.0.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
CVE-2024-9618
6.4 Medium
-
liton arefin image hover effects for elementor
WordPress Image Hover Effects for Elementor plugin <= 1.0.2.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-22323
6.5 Medium
-
master-addons master addons, litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits +1 more
Master Addons -- Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip Module
CVE-2024-9502
6.4 Medium
-
wpadminify wp adminify, litonice13 wp adminify – white label wordpress, admin menu editor, login customizer +1 more
WP Adminify – Best WordPress Custom Dashboard Plugin <= 4.0.1.6 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-8959
6.4 Medium
-
5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more
Freemius SDK <= 2.4.2 - Missing Authorization Checks
CVE-2022-4974
6.3 Medium
-
master-addons master addons, litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits +1 more
Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via data-jltma-wrapper-link Element
CVE-2024-6282
5.4 Medium
-
master-addons master addons, litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits, wordpress free widgets for elementor plugin +2 more
Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to MA Template Creation or Modification
CVE-2024-5382
6.5 Medium
-
master-addons master addons, litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits +1 more
Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via Navigation Menu Widget
CVE-2024-5542
7.2 High
-
master-addons master addons, litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits +1 more
Master Addons for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-3134
6.4 Medium
-
master-addons master addons, litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits +1 more
Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-4580
6.4 Medium
-
litonice13 admin bar editor – toolbar customization with user role based access & custom menus
Admin Bar Remover <= 1.0.2.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
CVE-2024-1716
4.3 Medium
-
master-addons master addons, litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits +1 more
Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.5.9 - Contributor+ Stored Cross-Site Scripting
CVE-2024-4265
6.4 Medium
-
master-addons master addons, litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits +1 more
Master Addons for Elementor <= 2.0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget
CVE-2024-2139
6.4 Medium