Move Addons For Elementor
Vendor:
First CVE: Mar 23, 2024 · Active for 2 years
9
Total CVEs
More Total CVEs than 88% of tracked products
4.5
Avg CVEs / Year
Higher CVE frequency than 88% of tracked products
5.5
Avg CVSS
Higher Avg CVSS than 17% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Move Addons For Elementor over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 23, 2024
2 years ago
Most Recent CVE
Jan 2, 2025
571 days ago
CVE Severity & Scoring
Move Addons For Elementor9 CVEs
89%
11%
All CVEs352,785 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network9 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low9 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None2 (22.2%)
Unknown0 (0.0%)
Required7 (77.8%)
Privileges Required
Low8 (88.9%)
High0 (0.0%)
None1 (11.1%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-30525HIGH Missing Authorization vulnerability in moveaddons Move Addons for Elementor.This issue affects Move Addons for Elementor: from n/a through 1.2.9. | Jun 4, 2024 | 7.3 | 22 | NO | NO |
CVE-2024-29920MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move | Mar 27, 2024 | 5.4 | 18 | NO | NO |
CVE-2024-56254MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in moveaddons Move Addons for Elementor move-addons allows Stored XSS.This issue | Jan 2, 2025 | 5.4 | 17 | NO | NO |
CVE-2024-47364MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in moveaddons Move Addons for Elementor move-addons allows Stored XSS.This issue | Oct 6, 2024 | 5.4 | 17 | NO | NO |
CVE-2024-47396MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in moveaddons Move Addons for Elementor move-addons allows Stored XSS.This issue | Oct 1, 2024 | 5.4 | 17 | NO | NO |
CVE-2024-4695MEDIUM The Move Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.3.1 due to insufficient | May 21, 2024 | 5.4 | 17 | NO | NO |
CVE-2024-34562MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move | May 8, 2024 | 5.4 | 17 | NO | NO |
CVE-2024-10360MEDIUM The Move Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the render function in includes/w | Oct 29, 2024 | 4.3 | 16 | NO | NO |
CVE-2024-2131MEDIUM The Move Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's infobox and button widget in all versions up to, and including, 1.2 | Mar 23, 2024 | 5.4 | 16 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (9 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (9 CVEs).
Media Mentions
Signals from CVEs in this product scope (9 CVEs).
Top CNAs Publishing CVEs For Move Addons For Elementor
Top CWEs
Versions
No cataloged versions.