EA
Product
Essential Addons for Elementor
60
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 2High 5Medium 52Low 1
Watch
Add Essential Addons for Elementor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-24255 | 5.4 | May 5 | The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as… Affected: before 4.5.4 |
| CVE-2026-81777 | 5.3 | Aug 28 | WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability Affected: through 6.8.0 |
| CVE-2026-25440 | 5.3 | Jun 15 | WordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerability Affected: before 6.6.0 |
| CVE-2026-23543 | 5.3 | Feb 19 | WordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerability Affected: through 6.5.5 |
| CVE-2024-3733 | 5.3 | Apr 25 | Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Information Exposure Affected: before 5.9.16 |
| CVE-2024-2974 | 5.3 | Apr 9 | Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.13 - Unauthenticated Sensitive Information Exposure Affected: before 5.9.14 |
| CVE-2023-3779 | 5.3 | Jul 20 | Essential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure Affected: through 5.8.1 |
| CVE-2025-39589 | 4.3 | Apr 16 | WordPress Essential Addons for Elementor plugin <= 6.1.9 - Sensitive Data Exposure Vulnerability Affected: through 6.1.9 |
| CVE-2021-4446 | 4.3 | Oct 16 | Essential Addons for Elementor <= 4.6.4 - Missing Authorization Affected: before 4.6.5 |
| CVE-2025-64352 | 2.7 | Oct 31 | WordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerability Affected: through 6.2.4 |