Element Pack – Widgets, Templates & Addons for Elementor vulnerabilities

Product

Element Pack – Widgets, Templates & Addons for Elementor

by bdthemes · last CVE Apr 8, 2026

CVEs

On KEV

7.5

Max CVSS

New 30D

Vulnerabilities29 In the news0 Timeline

Severity mix

Critical 0High 1Medium 28Low 0

Severity

All severities29 Critical0 High1 Medium28 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Element Pack – Widgets, Templates & Addons for Elementor to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-1793	6.5	0%	Feb 15	Element Pack Addons for Elementor <= 8.3.17 - Authenticated (Contributor+) Arbitrary File Read Affected: through 8.3.17
CVE-2024-4359	6.5	1%	Aug 9	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Arbitrary File Read Affected: through 5.7.2
CVE-2026-4655	6.4	0%	Apr 8	Element Pack Addons for Elementor <= 8.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Image Widget Affected: through 8.4.2
CVE-2025-5292	6.4	0%	May 31	Element Pack Addons for Elementor – Best Elementor addons with Ready Templates, Blocks, Widgets and WooCommerce Builder <= 5.11.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting Affected: through 5.11.2
CVE-2025-1457	6.4	0%	Apr 19	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.28 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting Affected: through 5.10.28
CVE-2024-5555	6.4	0%	Jul 18	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 5.6.5
CVE-2024-5554	6.4	0%	Jul 18	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 5.6.11
CVE-2025-13196	5.4	0%	Nov 18	Element Pack Addons for Elementor <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map widget Affected: through 8.3.4
CVE-2025-8100	5.4	6%	Aug 6	Element Pack Elementor Addons and Templates <= 8.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map Widget Marker Content Affected: through 8.1.5
CVE-2025-1458	5.4	0%	Apr 26	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.29 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 5.10.29
CVE-2024-12851	5.4	0%	Jan 8	Element Pack Lite - Addons for Elementor <= 5.10.14 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 5.10.14
CVE-2024-9058	5.4	0%	Dec 3	Element Pack Elementor Addons <= 5.10.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Lightbox Widget Affected: through 5.10.5
CVE-2024-9867	5.4	0%	Nov 5	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Map Widget Affected: through 5.10.2
CVE-2024-9657	5.4	0%	Nov 5	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting Affected: through 5.10.2
CVE-2024-9868	5.4	0%	Nov 2	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate Affected: through 5.10.1
CVE-2024-10310	5.4	0%	Nov 2	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Custom Gallery Widget Affected: through 5.10.1
CVE-2024-7247	5.4	0%	Aug 13	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Gallery and Countdown Widgets Affected: through 5.7.2
CVE-2024-4360	5.4	0%	Aug 9	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag Affected: through 5.7.6
CVE-2024-4643	5.4	0%	Aug 2	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 5.6.11
CVE-2024-3925	5.4	0%	Jun 12	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via onclick events Affected: through 5.6.11
CVE-2024-3926	5.4	0%	May 22	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom_attributes Affected: through 5.6.1
CVE-2024-1429	5.4	0%	Apr 18	Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Panel Slider Widget Affected: through 5.6.0
CVE-2024-1426	5.4	0%	Apr 18	Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Price List Widget Affected: through 5.6.0
CVE-2024-0837	5.4	0%	Apr 6	Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Custom Gallery' Widget Affected: through 5.3.2
CVE-2024-1428	5.4	0%	Apr 6	Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Trailer Box Widget Affected: through 5.5.3
CVE-2024-3927	5.3	0%	May 22	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.3 - Form Submission Admin Email Bypass Affected: through 5.6.3
CVE-2025-11536	5.0	0%	Oct 20	Element Pack Addons for Elementor <= 8.2.5 - Authenticated (Subscriber+) Blind Server-Side Request Forgery Affected: through 8.2.5
CVE-2024-11852	4.3	0%	Dec 22	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization Affected: through 5.10.12