Threat database

8 threats

Severity	CVSS	Signals	Threat	Source	Published
High	8.8	EPSS 0.6%	CVE-2026-3132Master Addons for Elementor Premium (WordPress plugin) · Code Injection High8.8EPSS 0.6%2026-03-02CVE Database V5CVE-2026-3132 The Master Addons for Elementor Premium plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.1.3 via the 'JLTMA_Widget_Admin::render_preview'. This is due to missing capability check. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute code on the server. EPSS 0.6%Vulnerability Jewel Theme CWE-94	CVE Database V5	2026-03-02
Medium	6.5	EPSS 0.4%	CVE-2023-40679Master Addons for Elementor (WordPress theme) · Missing Authorization Medium6.5EPSS 0.4%2025-12-24CVE Database V5CVE-2023-40679 Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Master Addons for Elementor: from n/a through 2.0.5.3. EPSS 0.4%Vulnerability Jewel Theme CWE-862	CVE Database V5	2025-12-24
Medium	5.9	EPSS 0.3%	CVE-2024-38710Master Addons for Elementor (WordPress theme) · XSS or 'Cross-site Scripting' Medium5.9EPSS 0.3%2024-07-20CVE Database V5CVE-2024-38710 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jewel Theme Master Addons for Elementor allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through 2.0.6.2. EPSS 0.3%Vulnerability Jewel Theme CWE-79	CVE Database V5	2024-07-20
Medium	6.5	EPSS 0.4%	CVE-2024-35660Master Addons for Elementor (WordPress theme) · Missing Authorization Medium6.5EPSS 0.4%2024-06-09CVE Database V5CVE-2024-35660 Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1. EPSS 0.4%Vulnerability Jewel Theme CWE-862	CVE Database V5	2024-06-09
Medium	6.5	EPSS 0.3%	CVE-2024-35688Master Addons for Elementor (WordPress theme) · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.3%2024-06-08CVE Database V5CVE-2024-35688 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jewel Theme Master Addons for Elementor allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through 2.0.5.9. EPSS 0.3%Vulnerability Jewel Theme CWE-79	CVE Database V5	2024-06-08
Medium	6.5	EPSS 0.2%	CVE-2024-35702Master Addons for Elementor (WordPress theme) · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.2%2024-06-08CVE Database V5CVE-2024-35702 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jewel Theme Master Addons for Elementor allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through 2.0.6.0. EPSS 0.2%Vulnerability Jewel Theme CWE-79	CVE Database V5	2024-06-08
Medium	4.3	EPSS 0.4%	CVE-2024-33595Master Addons for Elementor (WordPress theme) · Missing Authorization Medium4.3EPSS 0.4%2024-04-29CVE Database V5CVE-2024-33595 Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1. EPSS 0.4%Vulnerability Jewel Theme CWE-862	CVE Database V5	2024-04-29
Medium	6.5	EPSS 0.3%	CVE-2024-29911Master Addons for Elementor (WordPress theme) · Cross-site Scripting Medium6.5EPSS 0.3%2024-03-27CVE Database V5CVE-2024-29911 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jewel Theme Master Addons for Elementor allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1. EPSS 0.3%Vulnerability Jewel Theme CWE-79	CVE Database V5	2024-03-27

Page 1 of 1