Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-4953

The Elementor Website Builder WordPress plugin before 3.5.5 does not filter out user-controlled URLs from being loaded into the DOM. This could be used to inject rogue iframes that point to malicious URLs.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.106
EPSS Ranking 92.9%
CVSS Severity
CVSS v3 Score 6.1
Products affected by CVE-2022-4953


Contact Us

Shodan ® - All rights reserved