Login Request a demo
TP
Product
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce
by posimyththemes · last CVE Jul 10, 2026
29
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities29In the news0Timeline
Severity mix
Critical 0High 2Medium 27Low 0
Severity
All severities29Critical0High2Medium27Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-2203
8.8
1%
Mar 27
The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Clients Widget
Affected: through 5.4.1
CVE-2021-4331
8.8
1%
Mar 7
The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Privilege Escalation
Affected: through 2.0.6
CVE-2021-4332
6.5
1%
Mar 7
The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read
Affected: through 2.0.6; 4.0 through 4.1.9
CVE-2026-15285
6.4
0%
Jul 10
The Plus Addons for Elementor <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom Attributes
Affected: through 6.4.11
CVE-2026-9243
6.4
0%
May 29
The Plus Addons for Elementor <= 6.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'carousel_direction' Parameter
Affected: through 6.4.15
CVE-2026-5243
6.4
0%
May 14
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Lite Widget
Affected: through 6.4.11
CVE-2026-3311
6.4
0%
Apr 8
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar
Affected: through 6.4.9
CVE-2025-7646
6.4
0%
Aug 1
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 6.3.10
CVE-2024-2210
6.4
0%
Mar 27
The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Team Member Listing
Affected: through 5.4.1
CVE-2025-1287
5.4
0%
Mar 8
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Affected: through 6.2.2
CVE-2024-11829
5.4
0%
Feb 1
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 6.1.8
CVE-2024-5583
5.4
0%
Aug 22
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget Settings
Affected: through 5.6.2
CVE-2024-6575
5.4
0%
Aug 20
The Plus Addons for Elementor <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TP Page Scroll Widget
Affected: through 5.6.2
CVE-2024-5763
5.4
0%
Aug 20
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget
Affected: through 5.6.2
CVE-2024-4482
5.4
0%
Jul 3
The Plus Addons for Elementor <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Affected: through 5.6.1
CVE-2024-4983
5.4
0%
Jun 27
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.0- Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 5.6.0
CVE-2024-4484
5.4
1%
May 24
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 5.5.1
CVE-2024-4485
5.4
0%
May 24
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 5.5.2
CVE-2024-3718
5.4
0%
May 24
The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar, Header Meta Content, Scroll Navigation, Pricing Table, & Flip Box
Affected: through 5.5.4
CVE-2024-2784
5.4
0%
May 24
The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Hover Card
Affected: through 5.5.4
CVE-2024-2785
5.4
0%
May 9
The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate
Affected: through 5.4.2
CVE-2024-0445
5.4
1%
May 9
The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 5.4.2
CVE-2024-3197
5.4
0%
May 2
The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes
Affected: through 5.4.2
CVE-2024-3199
5.4
1%
May 2
The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Affected: through 5.4.2
CVE-2024-1419
5.4
0%
Mar 7
The Plus Addons for Elementor <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Header Meta Content Widget
Affected: through 5.4.0
CVE-2026-2385
5.3
0%
Feb 22
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Unauthenticated Email Relay
Affected: through 6.4.7
CVE-2026-2386
4.3
0%
Feb 18
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Incorrect Authorization to Authenticated (Author+) Arbitrary Draft Post Creation via 'post_type'
Affected: through 6.4.7
CVE-2024-10365
4.3
0%
Nov 20
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Affected: through 6.0.3
CVE-2024-8913
4.3
0%
Oct 11
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via content_template
Affected: through 5.6.11
Showing 29