VendorsLeap13premium_addons_for_elementorall versions

Vulnerabilities

Leap13 Premium Addons for Elementor

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

36CVEs

CVE-2024-56225

WordPress Premium Addons for Elementor plugin <= 4.10.56 - Broken Access Control vulnerability

Published 2024-12-31 · Modified

8.8EPSS 0.003

CVE-2023-34012

WordPress Premium Addons PRO Plugin <= 2.8.24 is vulnerable to Cross Site Scripting (XSS)

Published 2023-06-23 · Modified

7.1EPSS 0.004

CVE-2024-31278

WordPress Premium Addons for Elementor plugin <= 4.10.22 - Sensitive Data Exposure vulnerability

Published 2024-04-10 · Modified

6.5EPSS 0.005

CVE-2021-4445

Premium Addons for Elementor <= 4.5.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update

Published 2024-10-16 · Analyzed

6.5EPSS 0.004

CVE-2024-32791

WordPress Premium Addons for Elementor plugin <= 4.10.25 - Cross Site Scripting (XSS) vulnerability

Published 2024-04-24 · Modified

6.5EPSS 0.003

CVE-2024-24831

WordPress Premium Addons for Elementor plugin <= 4.10.16 - Cross Site Scripting (XSS) vulnerability

Published 2024-02-10 · Modified

6.5EPSS 0.003

CVE-2024-29106

WordPress Premium Addons for Elementor plugin <= 4.10.16 - Cross Site Scripting (XSS) vulnerability

Published 2024-03-19 · Modified

6.5EPSS 0.003

CVE-2024-37922

WordPress Premium Addons for Elementor plugin <= 4.10.34 - Cross Site Scripting (XSS) vulnerability

Published 2024-07-20 · Modified

6.5EPSS 0.003

CVE-2024-0376

Premium Addons for Elementor <= 4.10.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link Widget

Published 2024-04-09 · Modified

6.4EPSS 0.007

CVE-2024-0326

Premium Addons for Elementor <= 4.10.17 - Authenticated(Contributor+) Stored Cross-Site Scripting via Link Wrapper

Published 2024-03-13 · Modified

6.4EPSS 0.006

CVE-2024-2665

Premium Addons for Elementor <= 4.10.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button

Published 2024-04-10 · Modified

6.4EPSS 0.005

CVE-2024-2664

Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-04-10 · Modified

6.4EPSS 0.005

CVE-2024-3647

Premium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'arrow_style'

Published 2024-05-02 · Modified

6.4EPSS 0.004

CVE-2024-1680

Premium Addons for Elementor <= 4.10.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Banner, Team Members, and Image Scroll Widgets

Published 2024-03-13 · Modified

6.4EPSS 0.004

CVE-2024-3885

Premium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-05-02 · Modified

6.4EPSS 0.004

CVE-2024-8681

Premium Addons for Elementor <= 4.10.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Media Grid Widget

Published 2024-09-27 · Analyzed

6.4EPSS 0.004

CVE-2024-1242

Premium Addons for Elementor <= 4.10.18 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-02-20 · Modified

6.4EPSS 0.004

CVE-2024-2399

Premium Addons for Elementor <= 4.10.23 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-03-15 · Modified

6.4EPSS 0.004

CVE-2024-6340

Premium Addons for Elementor <= 4.10.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

Published 2024-07-03 · Modified

6.4EPSS 0.004

CVE-2024-4376

Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget

Published 2024-05-31 · Modified

6.4EPSS 0.003

CVE-2024-4378

Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Menu and Shape Divider

Published 2024-05-23 · Modified

6.4EPSS 0.003

CVE-2024-6495

Premium Addons for Elementor <= 4.10.36 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Animated Text Widget

Published 2024-07-12 · Modified

6.4EPSS 0.003

CVE-2024-10266

Premium Addons for Elementor <= 4.10.60 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Box Widget

Published 2024-10-29 · Analyzed

6.4EPSS 0.003

CVE-2025-4774

Premium Addons for Elementor <= 4.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

Published 2025-06-10 · Analyzed

6.4EPSS 0.002

CVE-2024-11937

Premium Addons for Elementor <= 4.10.69 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2025-07-04 · Analyzed

6.4EPSS 0.002

CVE-2021-24257

Premium Addons for Elementor < 4.2.8 - Contributor+ Stored Cross-Site Scripting (XSS)

Published 2021-05-05 · Modified

5.4EPSS 0.006

CVE-2024-4203

Premium Addons for Elementor <= 4.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-05-02 · Modified

5.4EPSS 0.005

CVE-2024-2666

Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

Published 2024-04-10 · Modified

5.4EPSS 0.004

CVE-2024-5553

Premium Addons for Elementor <= 4.10.33 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

Published 2024-06-12 · Modified

5.4EPSS 0.004

CVE-2024-4379

Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Global Tooltip

Published 2024-05-31 · Modified

5.4EPSS 0.003

CVE-2025-14155

Premium Addons for Elementor <= 4.11.53 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'get_template_content'

Published 2025-12-23 · Modified

5.3EPSS 0.008

CVE-2025-68494

WordPress Premium Addons for Elementor plugin <= 4.11.53 - Sensitive Data Exposure vulnerability

Published 2025-12-24 · Modified

5.3EPSS 0.003

CVE-2024-6434

Premium Addons for Elementor <= 4.10.35 - Regular Expressions Denial of Service

Published 2024-07-04 · Modified

4.3EPSS 0.006

CVE-2024-6824

Premium Addons for Elementor <= 4.10.38 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion and Arbitrary Title Update

Published 2024-08-08 · Analyzed

4.3EPSS 0.004

CVE-2024-4205

Premium Addons for Elementor <= 4.10.31 - Missing Authorization to Information Disclosure

Published 2024-05-31 · Modified

4.3EPSS 0.003

CVE-2025-14163

Premium Addons for Elementor <= 4.11.53 - Cross-Site Request Forgery via 'insert_inner_template'

Published 2025-12-23 · Modified

4.3EPSS 0.002

Leap13 Premium Addons for Elementor

Security check