Login Request a demo
EA
Product
Essential Addons for Elementor
by WPDeveloper · last CVE Oct 19, 2026
60
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities60In the news0Timeline
Severity mix
Critical 2High 5Medium 52Low 1
Severity
All severities60Critical2High5Medium52Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Essential Addons for Elementor to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-102394
6.5
0%
Oct 1
WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability
Affected: through 6.8.4
CVE-2025-69092
6.5
0%
Dec 30
WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability
Affected: through 6.5.3
CVE-2025-39590
6.5
0%
Apr 16
WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) Vulnerability
Affected: through 6.1.9
CVE-2026-110898
6.4
0%
Oct 19
WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability
Affected: through 6.8.5
CVE-2024-4448
6.4
1%
May 10
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Dual Color Header', 'Event Calendar', & 'Advanced Data Table'
Affected: before 5.9.20
CVE-2024-3728
6.4
1%
May 2
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery & Interactive Circle
Affected: before 5.9.16
CVE-2024-3645
6.4
0%
Apr 22
Essential Addons for Elementor Pro <= 5.8.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_html_tag'
Affected: before 5.8.12
CVE-2024-3333
6.4
0%
Apr 17
Essential Addons for Elementor <= 5.9.14 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget URL Attribute
Affected: before 5.9.15
CVE-2024-2623
6.4
0%
Apr 9
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 5.9.12
CVE-2024-2650
6.4
0%
Apr 9
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 5.9.11
CVE-2024-1537
6.4
0%
Mar 13
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table
Affected: before 5.9.10
CVE-2024-1276
6.4
0%
Feb 20
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 5.9.9
CVE-2024-1236
6.4
0%
Feb 20
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 5.9.9
CVE-2024-0586
6.4
0%
Feb 5
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scritping
Affected: through 5.9.4
CVE-2025-24752
6.1
1%
Apr 17
WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 6.0.14
CVE-2023-32241
6.1
0%
Aug 29
WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Cross Site Scripting (XSS)
Affected: through 5.4.8
CVE-2022-0683
6.1
3%
Feb 24
Essential Addons for Elementor Lite <= 5.0.8 Reflected Cross-Site Scripting
Affected: through 5.0.8
CVE-2024-8978
5.7
0%
Nov 15
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure
Affected: before 6.0.10
CVE-2024-8979
5.7
1%
Nov 15
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation
Affected: before 6.0.10
CVE-2025-6244
5.4
0%
Jul 8
Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Calendar` And `Business Reviews` Widgets
Affected: before 6.1.20
CVE-2024-9993
5.4
0%
Jun 7
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widget
Affected: before 6.1.13
CVE-2024-9994
5.4
0%
Jun 7
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widget
Affected: before 6.1.13
CVE-2024-56063
5.4
0%
Dec 31
WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerability
Affected: through 6.0.7
CVE-2024-8961
5.4
0%
Nov 15
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 6.0.8
CVE-2024-8742
5.4
0%
Sep 13
Essential Addons for Elementor <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery Widget
Affected: before 6.0.4
CVE-2024-8440
5.4
0%
Sep 11
Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget
Affected: before 6.0.4
CVE-2024-7092
5.4
0%
Aug 13
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via no_more_items_text Parameter
Affected: through 5.9.27
CVE-2024-39649
5.4
0%
Aug 1
WordPress Essential Addons for Elementor plugin <= 5.9.26 - Cross Site Scripting (XSS) vulnerability
Affected: through 5.9.26
CVE-2024-5189
5.4
0%
Jun 11
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 5.9.24
CVE-2024-5612
5.4
0%
Jun 7
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lightbox and Modal Widget
Affected: before 5.8.16
CVE-2024-5188
5.4
0%
Jun 6
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 5.9.23
CVE-2024-5073
5.4
0%
May 30
Essential Addons for Elementor <= 5.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Feed
Affected: before 5.9.22
CVE-2024-5086
5.4
0%
May 29
Essential Addons for Elementor PRO – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Carousel Widget
Affected: before 5.8.15
CVE-2024-4624
5.4
0%
May 14
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 5.9.21
CVE-2024-4275
5.4
0%
May 10
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Interactive Circles'
Affected: before 5.9.20
CVE-2024-4449
5.4
0%
May 10
Essential Addons for Elementor <= 5.9.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Several Widgets
Affected: before 5.9.20
CVE-2024-4156
5.4
1%
May 2
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 5.9.18
CVE-2024-4003
5.4
0%
May 2
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 5.9.16
CVE-2024-1171
5.4
0%
Feb 20
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery
Affected: before 5.9.9
CVE-2024-1172
5.4
0%
Feb 20
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion
Affected: before 5.9.9
CVE-2024-0954
5.4
0%
Feb 5
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 5.9.7
CVE-2024-0585
5.4
0%
Feb 5
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image URl
Affected: through 5.9.4
CVE-2023-7044
5.4
0%
Jan 4
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 5.9.2
CVE-2021-24255
5.4
1%
May 5
The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as…
Affected: before 4.5.4
CVE-2026-81777
5.3
0%
Aug 28
WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability
Affected: through 6.8.0
CVE-2026-25440
5.3
0%
Jun 15
WordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerability
Affected: before 6.6.0
CVE-2026-23543
5.3
0%
Feb 19
WordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerability
Affected: through 6.5.5
CVE-2024-3733
5.3
0%
Apr 25
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Information Exposure
Affected: before 5.9.16
CVE-2024-2974
5.3
0%
Apr 9
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.13 - Unauthenticated Sensitive Information Exposure
Affected: before 5.9.14
CVE-2023-3779
5.3
1%
Jul 20
Essential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure
Affected: through 5.8.1
Page 1 of 2 · 52 total
12