Xpro Elementor Addons vulnerabilities

The Xpro Elementor Addons plugin has an SQL Injection vulnerability that allows for Blind SQL Injection attacks. This issue affects versions from n/a through 1.5.1.

The Xpro Elementor Addons plugin (versions up to and including 1.7.10) is vulnerable to Cross-Site Request Forgery (CSRF). The flaw allows an attacker to force an authenticated user to perform unintended actions.

DOM-Based XSS vulnerability in the Xpro Elementor Addons plugin allows injection of malicious script into the page generated by the plugin. An attacker can exploit this to execute script in the victim's browser.