https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 06 May 2026 10:55:17 +0000 https://vulnerability.circl.lu/sighting/1cedf8b5-c6a2-4aa8-82f3-dc29ffc633b7/export {"uuid": "1cedf8b5-c6a2-4aa8-82f3-dc29ffc633b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13335", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2893", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13335\n\ud83d\udd39 Description: The Spexo Addons for Elementor \u2013 Free Elementor Addons, Widgets and Templates plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the tmpcoder_theme_install_func() function in all versions up to, and including, 1.0.14. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install a theme.\n\ud83d\udccf Published: 2025-01-24T11:07:32.551Z\n\ud83d\udccf Modified: 2025-01-24T11:07:32.551Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4edc7ef9-33db-4433-8ef2-cd06089ee8d5?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3227353/sastra-essential-addons-for-elementor/trunk/inc/wizard/wizard-ajax-api.php", "creation_timestamp": "2025-01-24T12:04:46.000000Z"} {"uuid": "1cedf8b5-c6a2-4aa8-82f3-dc29ffc633b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13335", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2893", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13335\n\ud83d\udd39 Description: The Spexo Addons for Elementor \u2013 Free Elementor Addons, Widgets and Templates plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the tmpcoder_theme_install_func() function in all versions up to, and including, 1.0.14. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install a theme.\n\ud83d\udccf Published: 2025-01-24T11:07:32.551Z\n\ud83d\udccf Modified: 2025-01-24T11:07:32.551Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4edc7ef9-33db-4433-8ef2-cd06089ee8d5?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3227353/sastra-essential-addons-for-elementor/trunk/inc/wizard/wizard-ajax-api.php", "creation_timestamp": "2025-01-24T12:04:46.000000Z"} https://vulnerability.circl.lu/sighting/1cedf8b5-c6a2-4aa8-82f3-dc29ffc633b7/export Fri, 24 Jan 2025 12:04:46 +0000