Master Addons for Elementor
Pixar Labs
Developer
3.2.3
Latest version
30,000
Installations
No date
Last updated
Vulnerability history
0 present
32 patched
7 Mitigation rules
- Broken Access Control vulnerability<= 3.2.22 days ago
- Authenticated (Editor+) Arbitrary File Upload via upload_template_kit AJAX ZIP Extraction vulnerability<= 3.1.931/08/2026
- Authenticated (Author+) Stored Cross-Site Scripting vulnerability<= 3.1.005/06/2026
- Unauthenticated Reflected Cross-Site Scripting vulnerability<= 2.0.7.201/05/2026
- Cross Site Scripting (XSS) vulnerability<= 2.1.316/03/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via 'ma_el_bh_table_btn_text' vulnerability<= 2.1.119/02/2026
- Missing Authorization to Unauthenticated Stored Cross-Site Scripting via Navigation Menu Widget vulnerability<= 2.0.6.111/02/2026
- Insecure Direct Object References (IDOR) vulnerability<= 2.0.9.9.431/12/2025
- Cross Site Scripting (XSS) vulnerability<= 2.0.9.9.405/12/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox vulnerability<= 2.0.9.011/08/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.0.8.216/07/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets vulnerability<= 2.0.7.204/03/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter vulnerability<= 2.0.7.104/03/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip Module vulnerability<= 2.0.6.706/01/2025
- Cross Site Scripting (XSS) vulnerability<= 2.0.9.9.411/11/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via data-jltma-wrapper-link Element vulnerability<= 2.0.6.410/09/2024
- Cross Site Scripting (XSS) vulnerability<= 2.0.6.211/07/2024
- Missing Authorization to MA Template Creation or Modification vulnerability<= 2.0.6.107/06/2024
- Cross Site Scripting (XSS) vulnerability<= 2.0.6.006/06/2024
- Cross Site Scripting (XSS) vulnerability<= 2.0.5.906/06/2024
- Broken Access Control on API vulnerability<= 2.0.5.4.103/06/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.0.6.016/05/2024
- Contributor+ Stored Cross-Site Scripting vulnerability<= 2.0.5.901/05/2024
- Broken Access Control on Duplicate Post vulnerability<= 2.0.5.4.125/04/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget vulnerability<= 2.0.5.626/03/2024
- Cross Site Scripting (XSS) vulnerability<= 2.0.5.4.125/03/2024
- Contributor+ Stored Cross-Site Scripting vulnerability<= 2.0.311/10/2023
- Broken Access Control vulnerability<= 2.0.5.322/08/2023
- Reflected Cross Site Scripting (XSS) vulnerability< 2.0.318/07/2023
- Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability< 1.8.528/02/2022
- Sensitive Information Disclosure vulnerability< 1.8.528/02/2022
- Reflected Cross-Site Scripting (XSS) vulnerability<= 1.8.121/02/2022