https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 04:37:39 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-283107 EUVD-2026-283107 https://cve.radiocsirt.org/vuln/euvd-2026-283107 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8979 <p>The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits &amp; WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.0.9 via the &#39;init_content_lostpassword_user_email_controls&#39; function. This makes it possible for authenticated attackers, with Author-level access and above, to extract sensitive data including usernames and passwords of any user, including Administrators, as long as that user opens the email notification for a password change request and images are not blocked by the email client.</p> <p>The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits &amp; WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.0.9 via the &#39;init_content_lostpassword_user_email_controls&#39; function. This makes it possible for authenticated attackers, with Author-level access and above, to extract sensitive data including usernames and passwords of any user, including Administrators, as long as that user opens the email notification for a password change request and images are not blocked by the email client.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-8979 https://cve.radiocsirt.org/vuln/ghsa-45w9-22fh-qrx4 <p>The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits &amp; WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.0.9 via the &#39;init_content_lostpassword_user_email_controls&#39; function. This makes it possible for authenticated attackers, with Author-level access and above, to extract sensitive data including usernames and passwords of any user, including Administrators, as long as that user opens the email notification for a password change request and images are not blocked by the email client.</p> <p>The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits &amp; WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.0.9 via the &#39;init_content_lostpassword_user_email_controls&#39; function. This makes it possible for authenticated attackers, with Author-level access and above, to extract sensitive data including usernames and passwords of any user, including Administrators, as long as that user opens the email notification for a password change request and images are not blocked by the email client.</p> https://cve.radiocsirt.org/vuln/ghsa-45w9-22fh-qrx4