Login Request a demo
EA
Product
Essential Addons for Elementor – Popular Elementor Templates & Widgets
by wpdevteam · last CVE Jul 21, 2026
49
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities49In the news0Timeline
Severity mix
Critical 0High 4Medium 45Low 0
Severity
All severities49Critical0High4Medium45Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Essential Addons for Elementor – Popular Elementor Templates & Widgets to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-15155
8.8
1%
Jul 11
Essential Addons for Elementor <= 6.6.10 - Authenticated (Contributor+) Account Takeover via Email Header Injection
Affected: through 6.6.10
CVE-2021-4447
8.8
0%
Oct 16
Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation
Affected: through 4.6.4
CVE-2024-3018
8.8
1%
Mar 30
Essential Addons for Elementor <= 5.9.13 - Authenticated (Author+) PHP Object Injection via error_resetpassword
Affected: through 5.9.13
CVE-2024-1536
7.4
1%
Mar 13
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar
Affected: through 5.9.9
CVE-2026-5193
6.5
0%
May 14
Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_user
Affected: through 6.5.13
CVE-2026-15145
6.4
0%
Jul 21
Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget
Affected: through 6.6.11
CVE-2026-15156
6.4
0%
Jul 21
Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reading Progress Global Color Settings
Affected: through 6.6.11
CVE-2026-6459
6.4
0%
Jul 8
Essential Addons for Elementor <= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget Popup
Affected: through 6.6.2
CVE-2026-1512
6.4
0%
Feb 14
Essential Addons for Elementor <= 6.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Box Widget
Affected: through 6.5.9
CVE-2025-13977
6.4
0%
Dec 17
Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 6.5.3
CVE-2025-8451
6.4
0%
Aug 15
Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items'
Affected: through 6.2.2
CVE-2024-5647
6.4
0%
Jul 3
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library
Affected: through 6.0.4
CVE-2024-4448
6.4
1%
May 10
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Dual Color Header', 'Event Calendar', & 'Advanced Data Table'
Affected: through 5.9.19
CVE-2024-3728
6.4
1%
May 2
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery & Interactive Circle
Affected: through 5.9.15
CVE-2024-3333
6.4
0%
Apr 17
Essential Addons for Elementor <= 5.9.14 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget URL Attribute
Affected: through 5.9.14
CVE-2024-2623
6.4
0%
Apr 9
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 5.9.11
CVE-2024-2650
6.4
0%
Apr 9
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 5.9.11
CVE-2024-1537
6.4
0%
Mar 13
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table
Affected: through 5.9.9
CVE-2024-1276
6.4
0%
Feb 20
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 5.9.8
CVE-2024-1236
6.4
0%
Feb 20
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 5.9.8
CVE-2024-0586
6.4
0%
Feb 5
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scritping
Affected: through 5.9.4
CVE-2024-8978
5.7
0%
Nov 15
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure
Affected: through 6.0.9
CVE-2024-8979
5.7
1%
Nov 15
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation
Affected: through 6.0.9
CVE-2025-6244
5.4
0%
Jul 8
Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Calendar` And `Business Reviews` Widgets
Affected: through 6.1.19
CVE-2024-9993
5.4
0%
Jun 7
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widget
Affected: through 6.1.12
CVE-2024-9994
5.4
0%
Jun 7
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widget
Affected: through 6.1.12
CVE-2024-8961
5.4
0%
Nov 15
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 6.0.7
CVE-2024-8742
5.4
0%
Sep 13
Essential Addons for Elementor <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery Widget
Affected: through 6.0.3
CVE-2024-8440
5.4
0%
Sep 11
Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget
Affected: through 6.0.3
CVE-2024-7092
5.4
0%
Aug 13
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via no_more_items_text Parameter
Affected: through 5.9.27
CVE-2024-5189
5.4
0%
Jun 11
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 5.9.23
CVE-2024-5188
5.4
0%
Jun 6
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 5.9.22
CVE-2024-5073
5.4
0%
May 30
Essential Addons for Elementor <= 5.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Feed
Affected: through 5.9.21
CVE-2024-4624
5.4
0%
May 14
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 5.9.20
CVE-2024-4275
5.4
0%
May 10
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Interactive Circles'
Affected: through 5.9.19
CVE-2024-4449
5.4
0%
May 10
Essential Addons for Elementor <= 5.9.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Several Widgets
Affected: through 5.9.19
CVE-2024-4156
5.4
1%
May 2
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 5.9.17
CVE-2024-4003
5.4
0%
May 2
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 5.9.15
CVE-2024-1171
5.4
0%
Feb 20
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery
Affected: through 5.9.8
CVE-2024-1172
5.4
0%
Feb 20
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion
Affected: through 5.9.8
CVE-2024-0954
5.4
0%
Feb 5
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 5.9.7
CVE-2024-0585
5.4
0%
Feb 5
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image URl
Affected: through 5.9.4
CVE-2023-7044
5.4
0%
Jan 4
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 5.9.2
CVE-2026-7665
5.3
7%
Jun 6
Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler
Affected: through 6.6.4
CVE-2026-1004
5.3
0%
Jan 16
Essential Addons for Elementor <= 6.5.5 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Affected: through 6.5.5
CVE-2024-3733
5.3
0%
Apr 25
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Information Exposure
Affected: through 5.9.15
CVE-2024-2974
5.3
0%
Apr 9
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.13 - Unauthenticated Sensitive Information Exposure
Affected: through 5.9.13
CVE-2023-3779
5.3
1%
Jul 20
Essential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure
Affected: through 5.8.1
CVE-2021-4446
4.3
0%
Oct 16
Essential Addons for Elementor <= 4.6.4 - Missing Authorization
Affected: through 4.6.4
Showing 49