Mmastodon TechnologyCybersecurity first seen 18 h ago, last 18 h ago, peak #11

Prime Elementor Addons XSS vulnerability remains unpatched

Original: Prime Elementor Addons: 1 CVE, 100% unpatched, trust score C. CVSS 6.4 (CWE-79 XSS). Patch tracking matters here. # cybe

The WordPress plugin Prime Elementor Addons has one open CVE, a cross-site scripting flaw with a CVSS score of 6.4, that remains completely unpatched. Security researcher Hugo Valters flags the issue in a vendor trust review, giving the plugin a C trust score and arguing that tracking whether vendors actually ship fixes is essential when rating WordPress extensions.

Why now: An unpatched, publicly disclosed XSS vulnerability in a widely usable WordPress plugin is a live security concern for site owners.

Prime Elementor AddonsWordPressHugo ValtersCVE

Open on mastodon →

Evidence

• Prime Elementor Addons: 1 CVE, 100% unpatched, trust score C. CVSS 6.4 (CWE-79 XSS). Patch tracking matters here. # cybersecurity # infosec # WordPress https://www. valtersit.com/vendors/prime-el ementor-addons/ · hugovalters

API: https://socialmediatrends-api.osmike.com/v1/trends/3505237