Login Request a demo
TP
Product
The Plus Addons For Elementor
by Posimyth · last CVE Mar 8, 2025
37
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities37In the news0Timeline
Severity mix
Critical 3High 5Medium 29Low 0
Severity
All severities37Critical3High5Medium29Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add The Plus Addons For Elementor to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-47178
9.8
1%
May 17
WordPress The Plus Addons for Elementor Pro plugin <= 5.2.8 - Unauthenticated Local File Inclusion vulnerability
Affected: before 5.2.9
CVE-2021-24949
9.8
2%
Jan 10
The "WP Search Filters" widget of The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not sanitise and escape the option parameter before using it in a SQL…
Affected: before 5.0.7
CVE-2021-24175
9.8
14%
Apr 5
The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.7 was being actively exploited to by malicious actors to bypass authentication, allowing unauthenticated…
Affected: before 4.1.7
CVE-2024-43932
8.8
1%
Nov 1
WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Broken Access Control vulnerability
Affected: before 5.6.3
CVE-2024-5455
8.8
1%
Jun 21
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.6 - Authenticated (Contributor+) Local File Inclusion
Affected: before 5.6.0
CVE-2024-2203
8.8
1%
Mar 27
The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Clients Widget
Affected: before 5.4.2; before 5.4.2
CVE-2021-4331
8.8
1%
Mar 7
The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Privilege Escalation
Affected: through 2.0.6; through 4.1.9
CVE-2021-24948
7.5
2%
Jan 10
The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not validate the qvquery parameter of the tp_get_dl_post_info_ajax AJAX action, which could allow…
Affected: before 5.0.7
CVE-2021-4332
6.5
1%
Mar 7
The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read
Affected: through 2.0.6; through 4.1.9
CVE-2024-2210
6.4
0%
Mar 27
The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Team Member Listing
Affected: before 5.4.2; before 5.4.2
CVE-2024-5344
6.1
0%
Jun 21
The Plus Addons for Elementor Page Builder <= 5.5.6 - Reflected Cross-Site Scripting via WP Login and Register Widget
Affected: before 5.6.0
CVE-2021-24358
6.1
2%
Jun 14
The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.10 did not validate a redirect parameter on a specifically crafted URL before redirecting the user to it,…
Affected: before 4.1.10
CVE-2021-24351
6.1
2%
Jun 14
The theplus_more_post AJAX action of The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.12 did not properly sanitise some of its fields, leading to a reflected…
Affected: before 4.1.12
CVE-2025-1287
5.4
0%
Mar 8
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Affected: before 6.2.3
CVE-2024-11829
5.4
0%
Feb 1
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 6.2.0
CVE-2024-53823
5.4
0%
Dec 6
WordPress The Plus Addons for Elementor plugin <= 5.6.14 - Cross Site Scripting (XSS) vulnerability
Affected: through 5.6.14
CVE-2024-43977
5.4
0%
Sep 17
WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Cross Site Scripting (XSS) vulnerability
Affected: before 5.6.3
CVE-2024-5583
5.4
0%
Aug 22
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget Settings
Affected: before 5.6.3
CVE-2024-6575
5.4
0%
Aug 20
The Plus Addons for Elementor <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TP Page Scroll Widget
Affected: before 5.6.3
CVE-2024-5763
5.4
0%
Aug 20
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget
Affected: before 5.6.3
CVE-2024-4482
5.4
0%
Jul 3
The Plus Addons for Elementor <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Affected: before 5.6.2
CVE-2024-4983
5.4
0%
Jun 27
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.0- Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 5.6.1; before 5.6.1
CVE-2024-35709
5.4
0%
Jun 8
WordPress The Plus Addons for Elementor plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability
Affected: before 5.5.5
CVE-2024-5341
5.4
0%
May 30
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Title Widget
Affected: before 5.5.0
CVE-2024-4484
5.4
1%
May 24
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 5.5.3
CVE-2024-4485
5.4
0%
May 24
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 5.5.3
CVE-2024-3718
5.4
0%
May 24
The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar, Header Meta Content, Scroll Navigation, Pricing Table, & Flip Box
Affected: before 5.5.5; before 5.5.5
CVE-2024-2784
5.4
0%
May 24
The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Hover Card
Affected: before 5.5.5
CVE-2024-2785
5.4
0%
May 9
The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate
Affected: before 5.5.0; before 5.5.0
CVE-2024-0445
5.4
1%
May 9
The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 5.5.0; before 5.5.0
CVE-2024-34373
5.4
0%
May 6
WordPress The Plus Addons for Elementor plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability
Affected: before 5.5.0
CVE-2024-3197
5.4
0%
May 2
The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes
Affected: before 5.5.0; before 5.5.0
CVE-2024-3199
5.4
1%
May 2
The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Affected: before 5.5.0; before 5.5.0
CVE-2024-1419
5.4
0%
Mar 7
The Plus Addons for Elementor <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Header Meta Content Widget
Affected: before 5.4.1; before 5.4.1
CVE-2021-24359
5.3
1%
Jun 14
The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.11 did not properly check that a user requesting a password reset was the legitimate user, allowing an…
Affected: before 4.1.11
CVE-2024-10365
4.3
0%
Nov 20
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Affected: before 6.0.4
CVE-2024-8913
4.3
0%
Oct 11
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via content_template
Affected: before 5.6.12
Showing 37