CVE-2024-4107

The Elementor Website Builder – More than Just a Page Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the several parameters in versions up to, and including, 3.21.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

• CWE-79
• CWE-79

• https://doc.clickup.com/9011113249/d/h/8chnb91-5091/3951e6f2afbd388Exploit, Third Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/0d5d47bd-4f05-4dc7-84c1-f7bc1196ee16?source=cveThird Party Advisory
• https://doc.clickup.com/9011113249/d/h/8chnb91-5091/3951e6f2afbd388Exploit, Third Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/0d5d47bd-4f05-4dc7-84c1-f7bc1196ee16?source=cveThird Party Advisory

Published

May 14, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-41064In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-41065In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-41066In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-41067In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-41068In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-41069In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-41070In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-41071Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-41072In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-41073In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-41074In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-41075In the Linux kernel, the following vulnerability has been re…5.5