The Plus Addons For Elementor vulnerabilities | LiveThreat CVE Feed

Product

The Plus Addons For Elementor

by Posimyth · last CVE Mar 8, 2025

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities37 In the news0 Timeline

Severity mix

Critical 3High 5Medium 29Low 0

Severity

All severities37 Critical3 High5 Medium29 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add The Plus Addons For Elementor to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-4332	6.5	1%	Mar 7	The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read Affected: through 2.0.6; through 4.1.9
CVE-2024-2210	6.4	0%	Mar 27	The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Team Member Listing Affected: before 5.4.2; before 5.4.2
CVE-2024-5344	6.1	0%	Jun 21	The Plus Addons for Elementor Page Builder <= 5.5.6 - Reflected Cross-Site Scripting via WP Login and Register Widget Affected: before 5.6.0
CVE-2021-24358	6.1	2%	Jun 14	The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.10 did not validate a redirect parameter on a specifically crafted URL before redirecting the user to it,… Affected: before 4.1.10
CVE-2021-24351	6.1	2%	Jun 14	The theplus_more_post AJAX action of The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.12 did not properly sanitise some of its fields, leading to a reflected… Affected: before 4.1.12
CVE-2025-1287	5.4	0%	Mar 8	The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets Affected: before 6.2.3
CVE-2024-11829	5.4	0%	Feb 1	The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 6.2.0
CVE-2024-53823	5.4	0%	Dec 6	WordPress The Plus Addons for Elementor plugin <= 5.6.14 - Cross Site Scripting (XSS) vulnerability Affected: through 5.6.14
CVE-2024-43977	5.4	0%	Sep 17	WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Cross Site Scripting (XSS) vulnerability Affected: before 5.6.3
CVE-2024-5583	5.4	0%	Aug 22	The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget Settings Affected: before 5.6.3
CVE-2024-6575	5.4	0%	Aug 20	The Plus Addons for Elementor <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TP Page Scroll Widget Affected: before 5.6.3
CVE-2024-5763	5.4	0%	Aug 20	The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget Affected: before 5.6.3
CVE-2024-4482	5.4	0%	Jul 3	The Plus Addons for Elementor <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget Affected: before 5.6.2
CVE-2024-4983	5.4	0%	Jun 27	The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.0- Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 5.6.1; before 5.6.1
CVE-2024-35709	5.4	0%	Jun 8	WordPress The Plus Addons for Elementor plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability Affected: before 5.5.5
CVE-2024-5341	5.4	0%	May 30	The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Title Widget Affected: before 5.5.0
CVE-2024-4484	5.4	1%	May 24	The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 5.5.3
CVE-2024-4485	5.4	0%	May 24	The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 5.5.3
CVE-2024-3718	5.4	0%	May 24	The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar, Header Meta Content, Scroll Navigation, Pricing Table, & Flip Box Affected: before 5.5.5; before 5.5.5
CVE-2024-2784	5.4	0%	May 24	The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Hover Card Affected: before 5.5.5
CVE-2024-2785	5.4	0%	May 9	The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate Affected: before 5.5.0; before 5.5.0
CVE-2024-0445	5.4	1%	May 9	The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 5.5.0; before 5.5.0
CVE-2024-34373	5.4	0%	May 6	WordPress The Plus Addons for Elementor plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability Affected: before 5.5.0
CVE-2024-3197	5.4	0%	May 2	The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes Affected: before 5.5.0; before 5.5.0
CVE-2024-3199	5.4	1%	May 2	The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget Affected: before 5.5.0; before 5.5.0
CVE-2024-1419	5.4	0%	Mar 7	The Plus Addons for Elementor <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Header Meta Content Widget Affected: before 5.4.1; before 5.4.1
CVE-2021-24359	5.3	1%	Jun 14	The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.11 did not properly check that a user requesting a password reset was the legitimate user, allowing an… Affected: before 4.1.11
CVE-2024-10365	4.3	0%	Nov 20	The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates Affected: before 6.0.4
CVE-2024-8913	4.3	0%	Oct 11	The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via content_template Affected: before 5.6.12