PA
Product
Premium Addons for Elementor
39
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 38Low 0
Watch
Add Premium Addons for Elementor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-56225 | 8.8 | Dec 31 | WordPress Premium Addons for Elementor plugin <= 4.10.56 - Broken Access Control vulnerability Affected: through 4.10.56 |
| CVE-2026-62078 | 6.5 | Sep 30 | WordPress Premium Addons for Elementor plugin <= 4.11.105 - Cross Site Scripting (XSS) vulnerability Affected: through 4.11.105 |
| CVE-2026-94168 | 6.5 | Sep 23 | WordPress Premium Addons for Elementor plugin <= 4.11.105 - Cross Site Scripting (XSS) vulnerability Affected: through 4.11.105 |
| CVE-2024-31278 | 6.5 | Apr 10 | Insertion of Sensitive Information Into Sent Data vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor.This issue affects Premium Addons for… Affected: through 4.10.22 |
| CVE-2024-3647 | 6.4 | May 2 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's post ticker widget in all versions up to, and including,… Affected: before 4.10.29 |
| CVE-2024-2665 | 6.4 | Apr 10 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's button in all versions up to, and including, 4.10.27 due to… Affected: before 4.10.28 |
| CVE-2024-2664 | 6.4 | Apr 10 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown Widget in all versions up to, and including, 4.10.24… Affected: before 4.10.25 |
| CVE-2024-0326 | 6.4 | Mar 13 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Link Wrapper functionality in all versions up to, and… Affected: before 4.10.18 |
| CVE-2024-1242 | 6.4 | Feb 29 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button onclick attribute in all versions up to, and including, 4.10.18… Affected: before 4.10.19 |
| CVE-2023-34012 | 6.1 | Jun 23 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Premium Addons for Elementor Premium Addons PRO plugin <= 2.8.24 versions Affected: through 2.8.24 |
| CVE-2025-69300 | 5.4 | Jan 22 | WordPress Premium Addons for Elementor plugin <= 4.11.63 - Settings Change vulnerability Affected: through 4.11.63 |
| CVE-2024-11937 | 5.4 | Jul 4 | Premium Addons for Elementor <= 4.10.69 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 4.10.70 |
| CVE-2025-4774 | 5.4 | Jun 10 | Premium Addons for Elementor <= 4.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget Affected: before 4.11.9 |
| CVE-2024-10266 | 5.4 | Oct 29 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video Box widget in all versions up to, and including, 4.10.60… Affected: before 4.10.61 |
| CVE-2024-8681 | 5.4 | Sep 27 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Media Grid widget in all versions up to, and including, 4.10.52… Affected: before 4.10.53 |
| CVE-2024-37922 | 5.4 | Jul 20 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor.This issue… Affected: before 4.10.35 |
| CVE-2024-6495 | 5.4 | Jul 12 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Animated Text widget in all versions up to, and including,… Affected: before 4.10.37 |
| CVE-2024-6340 | 5.4 | Jul 3 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown widget in all versions up to, and including, 4.10.36… Affected: before 4.10.36 |
| CVE-2024-5553 | 5.4 | Jun 12 | The Premium Addons for Elementor plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via several parameters in all versions up to, and including, 4.10.33… Affected: before 4.10.34 |
| CVE-2024-4379 | 5.4 | May 31 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Global Tooltip widget in all versions up to, and including,… Affected: before 4.10.32 |
| CVE-2024-4376 | 5.4 | May 31 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Fancy Text widget in all versions up to, and including, 4.10.31… Affected: before 4.10.32 |
| CVE-2024-4378 | 5.4 | May 23 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's menu and shape widgets in all versions up to, and including,… Affected: before 4.10.32 |
| CVE-2024-4203 | 5.4 | May 2 | The Premium Addons Pro for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the maps widget in all versions up to, and including, 4.10.30 due to… Affected: before 4.10.31 |
| CVE-2024-3885 | 5.4 | May 2 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the subcontainer value parameter in all versions up to, and including,… Affected: before 4.10.29 |
| CVE-2024-32791 | 5.4 | Apr 24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor.This issue… Affected: before 4.10.26 |
| CVE-2024-2666 | 5.4 | Apr 10 | The Premium Addons for Elementor plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the plugin's Bullet List Widget in all versions up to, and… Affected: before 4.10.25 |
| CVE-2024-0376 | 5.4 | Apr 9 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Wrapper Link Widget in all versions up to, and including,… Affected: through 4.10.16 |
| CVE-2024-29106 | 5.4 | Mar 19 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Addons for Elementor allows Stored XSS.This issue affects… Affected: through 4.10.16 |
| CVE-2024-2399 | 5.4 | Mar 15 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and including, 4.10.23 due to… Affected: before 4.10.24 |
| CVE-2024-1680 | 5.4 | Mar 13 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Settings URL of the Banner, Team Members, and Image Scroll widgets… Affected: before 4.10.22 |
| CVE-2024-24831 | 5.4 | Feb 10 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor.This issue… Affected: before 4.10.17 |
| CVE-2021-24257 | 5.4 | May 5 | The “Premium Addons for Elementor” WordPress Plugin before 4.2.8 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as… Affected: before 4.2.8 |
| CVE-2025-68494 | 5.3 | Dec 24 | WordPress Premium Addons for Elementor plugin <= 4.11.53 - Sensitive Data Exposure vulnerability Affected: through 4.11.53 |
| CVE-2025-14155 | 5.3 | Dec 23 | Premium Addons for Elementor <= 4.11.53 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'get_template_content' Affected: before 4.11.54 |
| CVE-2025-14163 | 4.3 | Dec 23 | Premium Addons for Elementor <= 4.11.53 - Cross-Site Request Forgery via 'insert_inner_template' Affected: before 4.11.54 |
| CVE-2021-4445 | 4.3 | Oct 16 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Arbitrary Option Updates in versions up to, and including, 4.5.1 Affected: before 4.5.2 |
| CVE-2024-6824 | 4.3 | Aug 8 | The Premium Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'check_temp_validity'… Affected: before 4.10.39 |
| CVE-2024-6434 | 4.3 | Jul 4 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Regular Expression Denial of Service (ReDoS) in all versions up to, and including, 4.10.35 Affected: before 4.10.36 |
| CVE-2024-4205 | 4.3 | May 31 | The Premium Addons for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_template_content() function in all… Affected: before 4.10.32 |
Showing 39