Element Pack vulnerabilities | LiveThreat CVE Feed

Product

Element Pack

by Bdthemes · last CVE Aug 6, 2025

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities34 In the news0 Timeline

Severity mix

Critical 0High 2Medium 32Low 0

Severity

All severities34 Critical0 High2 Medium32 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Element Pack to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-30496	8.8	1%	Mar 29	WordPress Element Pack Lite plugin <= 5.5.3 - SQL Injection vulnerability Affected: before 5.5.4
CVE-2024-2966	7.5	0%	Apr 11	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.5.6 - Sensitive Information Exposure via element_pack_ajax_search Affected: before 5.6.0
CVE-2024-4359	6.5	1%	Aug 9	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Arbitrary File Read Affected: before 5.7.3
CVE-2024-33568	6.5	1%	Jun 4	WordPress Element Pack Pro plugin < 7.19.3 - Arbitrary File Read and Phar Deserialization vulnerability Affected: through 7.7.4
CVE-2024-5555	6.4	0%	Jul 18	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 5.6.6
CVE-2024-5554	6.4	0%	Jul 18	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 5.6.12
CVE-2025-8100	5.4	6%	Aug 6	Element Pack Elementor Addons and Templates <= 8.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map Widget Marker Content Affected: before 8.1.6
CVE-2025-5944	5.4	0%	Jul 3	Element Pack Addons for Elementor <= 8.0.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-caption Attribute Affected: before 8.1.0
CVE-2025-1458	5.4	0%	Apr 26	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.29 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 5.10.30
CVE-2024-12851	5.4	0%	Jan 8	Element Pack Lite - Addons for Elementor <= 5.10.14 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 5.10.15
CVE-2024-9058	5.4	0%	Dec 3	Element Pack Elementor Addons <= 5.10.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Lightbox Widget Affected: before 5.10.6
CVE-2024-10980	5.4	0%	Nov 29	Element Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS Affected: before 5.10.3
CVE-2024-10493	5.4	0%	Nov 28	Element Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS Affected: before 5.10.3
CVE-2024-9867	5.4	0%	Nov 5	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Map Widget Affected: before 5.10.3
CVE-2024-9657	5.4	0%	Nov 5	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting Affected: before 5.10.3
CVE-2024-9868	5.4	0%	Nov 2	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate Affected: before 5.10.2
CVE-2024-10310	5.4	0%	Nov 2	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Custom Gallery Widget Affected: before 5.10.2
CVE-2024-47392	5.4	0%	Oct 5	WordPress Element Pack Elementor Addons plugin <= 5.7.5 - Cross Site Scripting (XSS) vulnerability Affected: before 5.7.6
CVE-2024-7247	5.4	0%	Aug 13	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Gallery and Countdown Widgets Affected: before 5.7.3
CVE-2024-4360	5.4	0%	Aug 9	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag Affected: before 5.7.7
CVE-2024-4643	5.4	0%	Aug 2	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 5.7.1
CVE-2024-39667	5.4	0%	Aug 1	WordPress Element Pack Elementor Addons plugin <= 5.6.11 - Cross Site Scripting (XSS) vulnerability Affected: before 5.6.12
CVE-2024-2455	5.4	0%	Aug 1	Element Pack - Addon for Elementor Page Builder WordPress Plugin <= 7.9.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link URL Affected: through 7.9.0
CVE-2024-3925	5.4	0%	Jun 12	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via onclick events Affected: before 5.6.12
CVE-2024-3926	5.4	0%	May 22	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom_attributes Affected: before 5.6.2
CVE-2024-32572	5.4	0%	Apr 18	WordPress Element Pack Elementor Addons plugin <= 5.6.0 - Cross Site Scripting (XSS) vulnerability Affected: before 5.6.1
CVE-2024-1429	5.4	0%	Apr 18	Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Panel Slider Widget Affected: before 5.6.1
CVE-2024-1426	5.4	0%	Apr 18	Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Price List Widget Affected: through 5.6.1
CVE-2024-0837	5.4	0%	Apr 6	Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Custom Gallery' Widget Affected: before 5.3.3
CVE-2024-1428	5.4	0%	Apr 6	Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Trailer Box Widget Affected: before 5.5.4
CVE-2024-30185	5.4	0%	Mar 27	WordPress Element Pack Elementor Addons plugin <= 5.5.3 - Cross Site Scripting (XSS) vulnerability Affected: before 5.5.4
CVE-2024-24840	5.4	0%	Mar 23	WordPress Element Pack Elementor Addons plugin <= 5.4.11 - Broken Access Control on Duplicate Post vulnerability Affected: before 5.4.12
CVE-2024-3927	5.3	0%	May 22	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.3 - Form Submission Admin Email Bypass Affected: before 5.6.4
CVE-2024-11852	4.3	0%	Dec 22	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization Affected: before 5.10.13