VendorsExclusive Addonsexclusive_addons_for_elementorany version
Vulnerabilities

Exclusive Addons for Elementor any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

20CVEs
CVE-2024-33914
WordPress Exclusive Addons for Elementor plugin <= 2.6.9.1 - Broken Access Control on Post Duplication vulnerability
Published 2024-05-03 · Modified
9.8EPSS 0.004
CVE-2024-30232
WordPress Exclusive Addons for Elementor plugin <= 2.6.9 - Cross Site Scripting (XSS) vulnerability
Published 2024-03-26 · Modified
6.5EPSS 0.003
CVE-2024-30177
WordPress Exclusive Addons for Elementor plugin <= 2.6.8 - Cross Site Scripting (XSS) vulnerability
Published 2024-03-27 · Modified
6.5EPSS 0.003
CVE-2024-32557
WordPress Exclusive Addons for Elementor plugin <= 2.6.9.2 - Cross Site Scripting (XSS) vulnerability
Published 2024-04-16 · Modified
6.5EPSS 0.003
CVE-2024-49292
WordPress Exclusive Addons for Elementor plugin <= 2.7.1 - Cross-Site Scripting vulnerability
Published 2024-10-17 · Modified
6.5EPSS 0.002
CVE-2024-1234
Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2024-03-13 · Modified
6.41 PoCEPSS 0.016
CVE-2024-3489
Exclusive Addons for Elementor <= 2.6.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Expired Title
Published 2024-05-02 · Modified
6.4EPSS 0.005
CVE-2024-2028
Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Covid-19 Stats Widget
Published 2024-03-13 · Modified
6.4EPSS 0.004
CVE-2024-2503
Exclusive Addons for Elementor <= 2.6.9.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Post Grid
Published 2024-05-02 · Modified
6.4EPSS 0.004
CVE-2024-1414
Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call To Action Widget
Published 2024-03-13 · Modified
6.4EPSS 0.004
CVE-2024-1413
Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget
Published 2024-03-13 · Modified
6.4EPSS 0.004
CVE-2024-3985
Exclusive Addons for Elementor <= 2.6.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call to Action
Published 2024-05-02 · Modified
6.4EPSS 0.004
CVE-2024-4618
Exclusive Addons for Elementor <= 2.6.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget
Published 2024-05-15 · Modified
6.4EPSS 0.004
CVE-2024-2750
Exclusive Addons for Elementor <= 2.6.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget
Published 2024-05-02 · Modified
6.4EPSS 0.003
CVE-2024-2751
Exclusive Addons for Elementor <= 2.6.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via InfoBox
Published 2024-05-02 · Modified
6.4EPSS 0.003
CVE-2025-1571
Exclusive Addons for Elementor <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Image Comparison Widgets
Published 2025-02-28 · Analyzed
6.4EPSS 0.003
CVE-2024-5332
Exclusive Addons for Elementor <= 2.6.9.8 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Card Widget
Published 2024-06-26 · Modified
6.4EPSS 0.003
CVE-2025-4783
Exclusive Addons for Elementor <= 2.7.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget
Published 2025-05-26 · Analyzed
6.4EPSS 0.002
CVE-2025-7498
Exclusive Addons for Elementor <= 2.7.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown
Published 2025-08-06 · Analyzed
6.4EPSS 0.002
CVE-2024-10312
Exclusive Addons for Elementor <= 2.7.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Published 2024-10-29 · Analyzed
4.3EPSS 0.004