CVE-2023-49739highobserved exploitation

CVE-2023-49739: high-severity vulnerability in IdeaBox Creations PowerPack Pro for Elementor

WordPress PowerPack Pro for Elementor plugin <= 2.9.23 - Reflected Cross Site Scripting (XSS) vulnerability

Published · Updated

Follow this CVE+ Monitor PowerPack Pro for Elementor

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

43Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Actcvss 7.1epss 0.4%
from disclosure to weapon
Published on NVDDec 14
VulnCheckDec 1
Vulnerability in IdeaBox Creations PowerPack Pro for Elementor.This issue affects PowerPack Pro for Elementor: from n/a through 2.9.23.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Affected products
IdeaBox Creations · PowerPack Pro for Elementor
Related CVEs — IdeaBox Creations PowerPack Pro for Elementor

In the same product, most dangerous first.

CVE-2024-24844HIGHWordPress PowerPack Pro for Elementor plugin <= 2.10.6 - Unauthenticated Plugin Settings Reset vulnerabilityEPSS 0.3%