nicheaddons vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 202420
3. 20254
4. 20261

Newest CVEs

• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2025-8150

  Events Addon for Elementor <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter and Countdown Widgets

  nicheaddons · Events Addon for Elementor

  Medium6.4
• CVE-2025-8212

  Medical Addon for Elementor <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter Widget

  nicheaddons · Medical Addon for Elementor

  Medium6.4
• CVE-2024-13854

  Education Addon for Elementor <= 1.3.1 - Authenticated (Contributor+) Insecure Direct Object Reference via naedu_elementor_template Shortcode

  nicheaddons · Education Addon for Elementor

  Medium4.3
• CVE-2024-12046

  Medical Addon for Elementor <= 1.6.2 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode

  nicheaddons · Medical Addon for Elementor

  Medium4.3
• CVE-2024-12061

  Events Addon for Elementor <= 2.2.3 - Authenticated (Contributor+) Post Disclosure

  nicheaddons · Events Addon for Elementor

  Medium4.3
• CVE-2024-54316

  WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.8 - Cross Site Scripting (XSS) vulnerability

  nicheaddons · Restaurant & Cafe Addon for Elementor

  Medium6.5
• CVE-2024-54315

  WordPress Events Addon for Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

  nicheaddons · Events Addon for Elementor

  Medium6.5
• CVE-2024-54314

  WordPress Primary Addon for Elementor plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

  nicheaddons · Primary Addon for Elementor

  Medium6.5
• CVE-2023-47826

  WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.3 - Broken Access Control vulnerability

  NicheAddons · Restaurant & Cafe Addon for Elementor

  Medium6.5