VendorsWPDeveloperessential_addons_for_elementorany version

Vulnerabilities

WPDeveloper Essential Addons for Elementor any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

55CVEs

CVE-2023-32243

WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation

Published 2023-05-12 · Modified

9.8EPSS 0.755

CVE-2022-0320

Essential Addons for Elementor < 5.0.5 - Unauthenticated LFI

Published 2022-02-01 · Modified

9.8EPSS 0.020

CVE-2023-41955

WordPress Essential Addons for Elementor plugin <= 5.8.8 - Contributor+ Privilege Escalation vulnerability

Published 2024-05-17 · Analyzed

8.8EPSS 0.008

CVE-2024-3018

Essential Addons for Elementor <= 5.9.13 - Authenticated (Author+) PHP Object Injection via error_resetpassword

Published 2024-03-30 · Modified

8.8EPSS 0.008

CVE-2021-4447

Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation

Published 2024-10-16 · Analyzed

8.8EPSS 0.005

CVE-2023-32245

WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Server Side Request Forgery (SSRF)

Published 2023-11-18 · Modified

8.8EPSS 0.003

CVE-2024-8979

Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation

Published 2024-11-15 · Analyzed

8.0EPSS 0.005

CVE-2024-1536

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar

Published 2024-03-13 · Modified

7.4EPSS 0.005

CVE-2025-24752

WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability

Published 2025-04-17 · Modified

7.1EPSS 0.012

CVE-2023-32241

WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Cross Site Scripting (XSS)

Published 2023-08-29 · Modified

7.1EPSS 0.004

CVE-2025-39590

WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) Vulnerability

Published 2025-04-16 · Modified

6.5EPSS 0.003

CVE-2024-39649

WordPress Essential Addons for Elementor plugin <= 5.9.26 - Cross Site Scripting (XSS) vulnerability

Published 2024-08-01 · Modified

6.5EPSS 0.003

CVE-2024-56063

WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerability

Published 2024-12-31 · Modified

6.5EPSS 0.002

CVE-2025-69092

WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability

Published 2025-12-30 · Analyzed

6.5EPSS 0.002

CVE-2024-4156

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.17 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-05-02 · Modified

6.4EPSS 0.006

CVE-2024-3728

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery & Interactive Circle

Published 2024-05-02 · Modified

6.4EPSS 0.006

CVE-2024-4448

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Dual Color Header', 'Event Calendar', & 'Advanced Data Table'

Published 2024-05-10 · Modified

6.4EPSS 0.005

CVE-2024-4003

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-05-02 · Modified

6.4EPSS 0.005

CVE-2024-1236

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-02-20 · Modified

6.4EPSS 0.005

CVE-2024-1276

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-02-20 · Modified

6.4EPSS 0.004

CVE-2024-2623

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-04-09 · Modified

6.4EPSS 0.004

CVE-2024-4624

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.20 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-05-14 · Modified

6.4EPSS 0.004

CVE-2024-7092

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via no_more_items_text Parameter

Published 2024-08-13 · Analyzed

6.4EPSS 0.004

CVE-2024-5189

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.23 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-06-11 · Modified

6.4EPSS 0.004

CVE-2023-7044

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-01-04 · Modified

6.4EPSS 0.004

CVE-2024-0954

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-02-05 · Modified

6.4EPSS 0.004

CVE-2024-1537

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table

Published 2024-03-13 · Modified

6.4EPSS 0.004

CVE-2024-3333

Essential Addons for Elementor <= 5.9.14 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget URL Attribute

Published 2024-04-17 · Modified

6.4EPSS 0.004

CVE-2024-0586

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scritping

Published 2024-02-05 · Modified

6.4EPSS 0.004

CVE-2024-8440

Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget

Published 2024-09-11 · Analyzed

6.4EPSS 0.004

CVE-2024-8742

Essential Addons for Elementor <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery Widget

Published 2024-09-13 · Analyzed

6.4EPSS 0.004

CVE-2024-2650

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-04-09 · Modified

6.4EPSS 0.004

CVE-2024-4275

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Interactive Circles'

Published 2024-05-10 · Modified

6.4EPSS 0.003

CVE-2024-4449

Essential Addons for Elementor <= 5.9.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Several Widgets

Published 2024-05-10 · Modified

6.4EPSS 0.003

CVE-2024-3645

Essential Addons for Elementor Pro <= 5.8.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_html_tag'

Published 2024-04-22 · Modified

6.4EPSS 0.003

CVE-2024-5073

Essential Addons for Elementor <= 5.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Feed

Published 2024-05-30 · Modified

6.4EPSS 0.003

CVE-2024-5188

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.22 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-06-06 · Modified

6.4EPSS 0.003

CVE-2024-8961

Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-11-15 · Analyzed

6.4EPSS 0.003

CVE-2024-5086

Essential Addons for Elementor PRO – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Carousel Widget

Published 2024-05-29 · Modified

6.4EPSS 0.003

CVE-2024-5612

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lightbox and Modal Widget

Published 2024-06-07 · Modified

6.4EPSS 0.003

WPDeveloper Essential Addons for Elementor any version

Security check