Master Addons for Elementor
Liton Arefin
Developer
2.1.4
Latest version
30,000
Installations
No date
Last updated
Vulnerability history
0 present
27 patched
7 Mitigation rules
- Authenticated (Contributor+) Stored Cross-Site Scripting via 'ma_el_bh_table_btn_text' vulnerability<= 2.1.1Feb 19, 2026
- Missing Authorization to Unauthenticated Stored Cross-Site Scripting via Navigation Menu Widget vulnerability<= 2.0.6.1Feb 11, 2026
- Insecure Direct Object References (IDOR) vulnerability<= 2.0.9.9.4Dec 31, 2025
- Cross Site Scripting (XSS) vulnerability<= 2.0.9.9.4Dec 5, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox vulnerability<= 2.0.9.0Aug 11, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.0.8.2Jul 16, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets vulnerability<= 2.0.7.2Mar 4, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter vulnerability<= 2.0.7.1Mar 4, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip Module vulnerability<= 2.0.6.7Jan 6, 2025
- Cross Site Scripting (XSS) vulnerability<= 2.0.9.9.4Nov 11, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via data-jltma-wrapper-link Element vulnerability<= 2.0.6.4Sep 10, 2024
- Cross Site Scripting (XSS) vulnerability<= 2.0.6.2Jul 11, 2024
- Missing Authorization to MA Template Creation or Modification vulnerability<= 2.0.6.1Jun 7, 2024
- Cross Site Scripting (XSS) vulnerability<= 2.0.6.0Jun 6, 2024
- Cross Site Scripting (XSS) vulnerability<= 2.0.5.9Jun 6, 2024
- Broken Access Control on API vulnerability<= 2.0.5.4.1Jun 3, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.0.6.0May 16, 2024
- Contributor+ Stored Cross-Site Scripting vulnerability<= 2.0.5.9May 1, 2024
- Broken Access Control on Duplicate Post vulnerability<= 2.0.5.4.1Apr 25, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget vulnerability<= 2.0.5.6Mar 26, 2024
- Cross Site Scripting (XSS) vulnerability<= 2.0.5.4.1Mar 25, 2024
- Contributor+ Stored Cross-Site Scripting vulnerability<= 2.0.3Oct 11, 2023
- Broken Access Control vulnerability<= 2.0.5.3Aug 22, 2023
- Reflected Cross Site Scripting (XSS) vulnerability< 2.0.3Jul 18, 2023
- Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability< 1.8.5Feb 28, 2022
- Sensitive Information Disclosure vulnerability< 1.8.5Feb 28, 2022
- Reflected Cross-Site Scripting (XSS) vulnerability<= 1.8.1Feb 21, 2022