Element Pack Elementor Addons vulnerabilities | LiveThreat CVE Feed

Product

Element Pack Elementor Addons

by bdthemes · last CVE Oct 12, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities14 In the news0 Timeline

Severity mix

Critical 0High 3Medium 11Low 0

Severity

All severities14 Critical0 High3 Medium11 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Element Pack Elementor Addons to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-108478	6.5	0%	Oct 12	WordPress Element Pack Elementor Addons plugin <= 8.8.8 - Cross Site Scripting (XSS) vulnerability Affected: through 8.8.8
CVE-2026-105873	6.5	0%	Oct 7	WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability Affected: through 8.8.6
CVE-2026-105871	6.5	0%	Oct 7	WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability Affected: through 8.8.6
CVE-2026-66574	6.5	0%	Sep 17	WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability Affected: through 8.8.3
CVE-2024-47392	5.4	0%	Oct 5	WordPress Element Pack Elementor Addons plugin <= 5.7.5 - Cross Site Scripting (XSS) vulnerability Affected: through 5.7.5
CVE-2024-39667	5.4	0%	Aug 1	WordPress Element Pack Elementor Addons plugin <= 5.6.11 - Cross Site Scripting (XSS) vulnerability Affected: through 5.6.11
CVE-2024-32572	5.4	0%	Apr 18	WordPress Element Pack Elementor Addons plugin <= 5.6.0 - Cross Site Scripting (XSS) vulnerability Affected: through 5.6.0
CVE-2024-30185	5.4	0%	Mar 27	WordPress Element Pack Elementor Addons plugin <= 5.5.3 - Cross Site Scripting (XSS) vulnerability Affected: through 5.5.3
CVE-2024-24840	5.4	0%	Mar 23	WordPress Element Pack Elementor Addons plugin <= 5.4.11 - Broken Access Control on Duplicate Post vulnerability Affected: through 5.4.11
CVE-2026-65502	5.3	0%	Aug 6	WordPress Element Pack Elementor Addons plugin <= 8.7.13 - Captcha Bypass vulnerability Affected: through 8.7.13
CVE-2025-31413	4.3	0%	Jan 22	WordPress Element Pack Elementor Addons plugin <= 8.3.13 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 8.3.13