Threat database

10 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.2%	CVE-2026-110897PowerPack Lite for Beaver Builder · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in IdeaBox… High7.1EPSS 0.2%2026-10-18CVE Database V5CVE-2026-110897 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beaver-builder allows Stored XSS.This issue affects PowerPack Lite for Beaver Builder: from n/a through 1.3.1. EPSS 0.2%Vulnerability IdeaBox Creations	CVE Database V5	2026-10-18
Medium	6.5	EPSS 0.1%	CVE-2026-111400PowerPack Addons for Elementor · Cross-site Scripting Medium6.5EPSS 0.1%2026-10-16CVE Database V5CVE-2026-111400 CVE-2026-111400 is a stored cross-site scripting (XSS) vulnerability in IdeaBox Creations PowerPack Addons for Elementor (powerpack-lite-for-elementor). The flaw allows improper neutralization of input during web page generation, potentially enabling an attacker with low privileges to inject malicious scripts. This affects versions from the initial release up to 3.1.0 inclusive. The vulnerability has a medium severity with a CVSS score of 6.5. EPSS 0.1%Vulnerability IdeaBox Creations	CVE Database V5	2026-10-16
Medium	6.5	EPSS 0.1%	CVE-2026-108488PowerPack Addons for Elementor · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in IdeaBox… Medium6.5EPSS 0.1%2026-10-13CVE Database V5CVE-2026-108488 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Stored XSS.This issue affects PowerPack Addons for Elementor: from n/a through 3.1.0. EPSS 0.1%Vulnerability IdeaBox Creations	CVE Database V5	2026-10-13
Medium	6.5	EPSS 0.2%	CVE-2026-32430PowerPack Addons for Elementor · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in IdeaBox… Medium6.5EPSS 0.2%2026-03-13CVE Database V5CVE-2026-32430 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Stored XSS.This issue affects PowerPack Addons for Elementor: from n/a through <= 2.9.9. EPSS 0.2%Vulnerability IdeaBox Creations	CVE Database V5	2026-03-13
Medium	5.3	EPSS 0.2%	CVE-2026-22488Dashboard Welcome for Beaver Builder · Missing Authorization Medium5.3EPSS 0.2%2026-01-08CVE Database V5CVE-2026-22488 Missing Authorization vulnerability in IdeaBox Creations Dashboard Welcome for Beaver Builder dashboard-welcome-for-beaver-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dashboard Welcome for Beaver Builder: from n/a through <= 1.0.8. EPSS 0.2%Vulnerability IdeaBox Creations	CVE Database V5	2026-01-08
High	7.5	EPSS 0.3%	CVE-2024-24844PowerPack Pro for Elementor · Missing Authorization High7.5EPSS 0.3%2025-12-23CVE Database V5CVE-2024-24844 Missing Authorization vulnerability in IdeaBox Creations PowerPack Pro for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PowerPack Pro for Elementor: from n/a through 2.10.6. EPSS 0.3%Vulnerability IdeaBox Creations #cwe-862	CVE Database V5	2025-12-23
High	7.1	EPSS 0.3%	CVE-2024-43330PowerPack for Beaver Builder · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High7.1EPSS 0.3%2024-08-18CVE Database V5CVE-2024-43330 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack for Beaver Builder allows Reflected XSS.This issue affects PowerPack for Beaver Builder: from n/a before 2.37.4. EPSS 0.3%Vulnerability IdeaBox Creations #cwe-79	CVE Database V5	2024-08-18
Medium	5.9	EPSS 0.3%	CVE-2024-37409PowerPack Lite for Beaver Builder · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in IdeaBox… Medium5.9EPSS 0.3%2024-07-22CVE Database V5CVE-2024-37409 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beaver-builder.This issue affects PowerPack Lite for Beaver Builder: from n/a through <= 1.3.0.4. EPSS 0.3%Vulnerability IdeaBox Creations	CVE Database V5	2024-07-22
Medium	4.9	EPSS 0.6%	CVE-2024-37410PowerPack Lite for Beaver Builder · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… Medium4.9EPSS 0.6%2024-07-09CVE Database V5CVE-2024-37410 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beaver-builder.This issue affects PowerPack Lite for Beaver Builder: from n/a through <= 1.3.0.3. EPSS 0.6%Vulnerability IdeaBox Creations	CVE Database V5	2024-07-09
High	7.1	EPSS 0.4%	CVE-2023-49739PowerPack Pro for Elementor · Vulnerability High7.1EPSS 0.4%2023-12-14CVE Database V5CVE-2023-49739 Vulnerability in IdeaBox Creations PowerPack Pro for Elementor.This issue affects PowerPack Pro for Elementor: from n/a through 2.9.23. EPSS 0.4%Vulnerability IdeaBox Creations	CVE Database V5	2023-12-14

Showing 1–10 of 10 results