SinaExtra vulnerabilities and threats

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.2%	CVE-2024-35703Sina Extension for Elementor (WordPress plugin) · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.2%2024-06-08CVE Database V5CVE-2024-35703 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SinaExtra Sina Extension for Elementor allows Stored XSS.This issue affects Sina Extension for Elementor: from n/a through 3.5.3. EPSS 0.2%Vulnerability SinaExtra CWE-79	CVE Database V5	2024-06-08
Medium	6.5	EPSS 0.6%	CVE-2024-34384Sina Extension for Elementor (WordPress plugin) · Path Traversal Medium6.5EPSS 0.6%2024-06-04CVE Database V5CVE-2024-34384 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in SinaExtra Sina Extension for Elementor allows PHP Local File Inclusion.This issue affects Sina Extension for Elementor: from n/a through 3.5.1. EPSS 0.6%Vulnerability SinaExtra CWE-22	CVE Database V5	2024-06-04
Medium	6.5	EPSS 0.3%	CVE-2024-29935Sina Extension for Elementor (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2024-03-27CVE Database V5CVE-2024-29935 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SinaExtra Sina Extension for Elementor allows Stored XSS.This issue affects Sina Extension for Elementor: from n/a through 3.5.0. EPSS 0.3%Vulnerability SinaExtra CWE-79	CVE Database V5	2024-03-27

Page 1 of 1