Skip to content

Nicheaddons vulnerabilities

Products

Newest

100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 more Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter CVE-2024-13362 6.1 MediumMay 1, 2026
nicheaddons events addon for elementor Events Addon for Elementor <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter and Countdown Widgets CVE-2025-8150 6.4 MediumAugust 29, 2025
nicheaddons medical addon for elementor Medical Addon for Elementor <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter Widget CVE-2025-8212 6.4 MediumAugust 2, 2025
nicheaddons education addon for elementor, education addon +1 more Education Addon for Elementor <= 1.3.1 - Authenticated (Contributor+) Insecure Direct Object Reference via naedu_elementor_template Shortcode CVE-2024-13854 4.3 MediumFebruary 19, 2025
nicheaddons medical addon for elementor Medical Addon for Elementor <= 1.6.2 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode CVE-2024-12046 4.3 MediumFebruary 4, 2025
nicheaddons events addon for elementor Events Addon for Elementor <= 2.2.3 - Authenticated (Contributor+) Post Disclosure CVE-2024-12061 4.3 MediumDecember 18, 2024
nicheaddons restaurant & cafe addon for elementor, restaurant \& cafe addon for elementor +1 more WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.8 - Cross Site Scripting (XSS) vulnerability CVE-2024-54316 6.5 MediumDecember 13, 2024
nicheaddons events addon for elementor WordPress Events Addon for Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-54315 6.5 MediumDecember 13, 2024
nicheaddons primary addon for elementor WordPress Primary Addon for Elementor plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-54314 6.5 MediumDecember 13, 2024
nicheaddons restaurant & cafe addon for elementor, restaurant \& cafe addon for elementor, restaurant and cafe addon for elementor +2 more WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.3 - Broken Access Control vulnerability CVE-2023-47826 6.5 MediumDecember 9, 2024
nicheaddons charity addon for elementor Charity Addon for Elementor <= 1.3.3 - Authenticated (Contributor+) Post Disclosure CVE-2024-12062 4.3 MediumDecember 3, 2024
nicheaddons restaurant & cafe addon for elementor, restaurant \& cafe addon for elementor +1 more Restaurant & Cafe Addon for Elementor <= 1.5.9 - Authenticated (Contributor+) Post Disclosure CVE-2024-10780 4.3 MediumNovember 28, 2024
nicheaddons primary addon for elementor Primary Addon for Elementor <= 1.6.2 - Authenticated (Contributor+) Post Disclosure CVE-2024-10670 4.3 MediumNovember 28, 2024
nicheaddons charity addon for elementor WordPress Charity Addon for Elementor plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-51938 6.5 MediumNovember 19, 2024
nicheaddons restaurant & cafe addon for elementor, restaurant \& cafe addon for elementor +1 more WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability CVE-2024-51581 6.5 MediumNovember 10, 2024
nicheaddons sales page addon – elementor & beaver builder, sales page addon +1 more WordPress Sales Page Addon plugin <= 1.4.5 - Stored Cross Site Scripting (XSS) vulnerability CVE-2024-51585 6.5 MediumNovember 9, 2024
nicheaddons primary addon for elementor WordPress Primary Addon for Elementor plugin <= 1.5.8 - Cross Site Scripting (XSS) vulnerability CVE-2024-49259 6.5 MediumOctober 17, 2024
nicheaddons events addon for elementor WordPress Events Addon for Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-49264 6.5 MediumOctober 17, 2024
5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
nicheaddons medical addon for elementor WordPress Medical Addon for Elementor plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability CVE-2024-44024 6.5 MediumOctober 6, 2024
nicheaddons charity addon for elementor WordPress Charity Addon for Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-44026 6.5 MediumOctober 6, 2024
nicheaddons restaurant & cafe addon for elementor, restaurant \& cafe addon for elementor +1 more WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability CVE-2024-44032 6.5 MediumOctober 6, 2024
nicheaddons primary addon for elementor WordPress Primary Addon for Elementor plugin <= 1.5.7 - Cross Site Scripting (XSS) vulnerability CVE-2024-44033 6.5 MediumOctober 6, 2024
nicheaddons events addon for elementor Events Addon for Elementor <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets CVE-2024-4669 6.4 MediumJune 11, 2024
nicheaddons primary addon for elementor, livemeshelementor addons for elementor +1 more Primary Addon for Elementor <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget CVE-2024-5229 6.4 MediumMay 25, 2024
nicheaddons events addon for elementor WordPress Events Addon for Elementor Plugin <= 2.1.3 is vulnerable to Broken Access Control CVE-2023-47827 6.5 MediumNovember 30, 2023