CVE-2022-0683

The Essential Addons for Elementor Lite WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the settings parameter found in the ~/includes/Traits/Helper.php file which allows attackers to inject arbitrary web scripts onto a pages that executes whenever a user clicks on a specially crafted link by an attacker. This affects versions up to and including 5.0.8.

• CWE-79
• CWE-79

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2680585%40essential-addons-for-elementor-lite&new=2680585%40essential-addons-for-elementor-lite&sfp_email=&sfph_mail=Patch, Third Party Advisory
• https://www.wordfence.com/vulnerability-advisories/#CVE-2022-0683Third Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2680585%40essential-addons-for-elementor-lite&new=2680585%40essential-addons-for-elementor-lite&sfp_email=&sfph_mail=Patch, Third Party Advisory
• https://www.wordfence.com/vulnerability-advisories/#CVE-2022-0683Third Party Advisory

Published

Feb 24, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0676Heap-based Buffer Overflow in GitHub repository radareorg/ra…7.8
• CVE-2022-0677Improper Handling of Length Parameter Inconsistency vulnerab…7.5
• CVE-2022-0678Cross-site Scripting (XSS) - Reflected in Packagist microweb…6.1
• CVE-2022-0679The Narnoo Distributor WordPress plugin through 2.5.1 fails …9.8
• CVE-2022-0680The Plezi WordPress plugin before 1.0.3 has a REST endpoint …6.1
• CVE-2022-0681The Simple Membership WordPress plugin before 4.1.0 does not…6.5
• CVE-2022-0684The WP Home Page Menu WordPress plugin before 3.1 does not s…4.8
• CVE-2022-0685Use of Out-of-range Pointer Offset in GitHub repository vim/…7.8
• CVE-2022-0686Authorization Bypass Through User-Controlled Key in NPM url-…9.1
• CVE-2022-0687The Amelia WordPress plugin before 1.0.47 stores image blobs…8.8
• CVE-2022-0688Business Logic Errors in Packagist microweber/microweber pri…4.9
• CVE-2022-0689Use multiple time the one-time coupon in Packagist microwebe…5.3