CVE Intelligence

Liton Arefin vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Liton Arefin products: 6 record(s), with severity, exploitation and fixes.

Master Addons for Elementor 4WP Adminify 2

Exploited only (KEV) →

CVE-2026-32462 Medium · 5.9 CWE-79 Mar 13, 2026
WordPress Master Addons for Elementor plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liton Arefin Master Addons for Elementor master-addons allows DOM-Based XSS.This issue affects Master Addons for Elementor: from n/a through <= 2.1.3.
CVE-2024-52387 Medium · 5.9 CWE-79 Feb 20, 2026
WordPress Master Addons plugin <= 2.0.9.9.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liton Arefin Master Addons for Elementor master-addons allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through <= 2.0.9.9.4.
CVE-2025-63053 Medium · 5.3 CWE-639 Dec 31, 2025
WordPress Master Addons for Elementor plugin <= 2.0.9.9.4 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Liton Arefin Master Addons for Elementor master-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Master Addons for Elementor: from n/a through <= 2.0.9.9.4.
CVE-2025-68593 Medium · 5.4 CWE-862 Dec 24, 2025
WordPress WP Adminify plugin <= 4.0.6.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Liton Arefin WP Adminify adminify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Adminify: from n/a through <= 4.0.6.1.
CVE-2025-68592 Medium · 4.3 CWE-862 Dec 24, 2025
WordPress WP Adminify plugin <= 4.0.6.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Liton Arefin WP Adminify adminify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Adminify: from n/a through <= 4.0.6.1.
CVE-2025-63055 Medium · 6.5 CWE-79 Dec 9, 2025
WordPress Master Addons for Elementor plugin <= 2.0.9.9.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liton Arefin Master Addons for Elementor master-addons allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through <= 2.0.9.9.4.