Qi Addons For Elementor vulnerabilities | LiveThreat CVE Feed

Product

Qi Addons For Elementor

by qodeinteractive · last CVE Sep 18, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 0High 2Medium 9Low 0

Severity

All severities11 Critical0 High2 Medium9 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Qi Addons For Elementor to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-47679	8.8	0%	May 17	WordPress Qi Addons For Elementor plugin <= 1.6.3 - Local File Inclusion vulnerability Affected: before 1.6.4
CVE-2024-4887	7.5	1%	Jun 7	Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Local File Inclusion Affected: through 1.7.2
CVE-2025-8146	6.4	0%	Aug 2	Qi Addons for Elementor <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TypeOut Text Widget Affected: through 1.9.2
CVE-2026-92249	6.1	0%	Sep 18	Qi Addons For Elementor <= 1.11 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter Affected: through 1.11
CVE-2025-6252	5.4	0%	Jun 28	Qi Addons For Elementor <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 1.9.1
CVE-2024-13699	5.4	0%	Feb 4	Qi Addons For Elementor <= 1.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 1.8.7
CVE-2024-4364	5.4	0%	Jun 6	Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Affected: through 1.7.2
CVE-2024-3309	5.4	0%	Apr 27	Qi Addons For Elementor <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown widget Affected: through 1.7.0
CVE-2024-0826	5.4	1%	Apr 9	Qi Addons For Elementor <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 1.6.7
CVE-2023-47680	5.4	0%	Nov 13	WordPress Qi Addons For Elementor Plugin <= 1.6.3 is vulnerable to Cross Site Scripting (XSS) Affected: through 1.6.3
CVE-2024-9530	4.3	0%	Oct 23	Qi Addons For Elementor <= 1.8.0 - Sensitive Information Exposure Affected: through 1.8.0