Premium Addons for Elementor – Powerful Elementor Templates & Widgets vulnerabilities

Product

Premium Addons for Elementor – Powerful Elementor Templates & Widgets

by leap13 · last CVE Jul 11, 2026

CVEs

On KEV

5.4

Max CVSS

New 30D

Vulnerabilities18 In the news0 Timeline

Severity mix

Critical 0High 0Medium 18Low 0

Severity

All severities18 Critical0 High0 Medium18 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Premium Addons for Elementor – Powerful Elementor Templates & Widgets to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-4790	5.4	0%	May 2	Premium Addons for Elementor <= 4.11.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_svg' Parameter Affected: through 4.11.70
CVE-2024-11937	5.4	0%	Jul 4	Premium Addons for Elementor <= 4.10.69 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 4.10.69
CVE-2025-4774	5.4	0%	Jun 10	Premium Addons for Elementor <= 4.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget Affected: through 4.11.8
CVE-2024-10266	5.4	0%	Oct 29	Premium Addons for Elementor <= 4.10.60 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Box Widget Affected: through 4.10.60
CVE-2024-8681	5.4	0%	Sep 27	Premium Addons for Elementor <= 4.10.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Media Grid Widget Affected: through 4.10.52
CVE-2024-6495	5.4	0%	Jul 12	Premium Addons for Elementor <= 4.10.36 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Animated Text Widget Affected: through 4.10.36
CVE-2024-6340	5.4	0%	Jul 3	Premium Addons for Elementor <= 4.10.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget Affected: through 4.10.36
CVE-2024-5553	5.4	0%	Jun 12	Premium Addons for Elementor <= 4.10.33 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting Affected: through 4.10.33
CVE-2024-4379	5.4	0%	May 31	Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Global Tooltip Affected: through 4.10.31
CVE-2024-4376	5.4	0%	May 31	Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget Affected: through 4.10.31
CVE-2024-4378	5.4	0%	May 23	Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Menu and Shape Divider Affected: through 4.10.31
CVE-2025-14155	5.3	1%	Dec 23	Premium Addons for Elementor <= 4.11.53 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'get_template_content' Affected: through 4.11.53
CVE-2026-12141	4.9	0%	Jul 11	Premium Addons for Elementor <= 4.11.84 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'premium_tooltip_text' Parameter Affected: through 4.11.84
CVE-2025-14163	4.3	0%	Dec 23	Premium Addons for Elementor <= 4.11.53 - Cross-Site Request Forgery via 'insert_inner_template' Affected: through 4.11.53
CVE-2021-4445	4.3	0%	Oct 16	Premium Addons for Elementor <= 4.5.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update Affected: through 4.5.1
CVE-2024-6824	4.3	0%	Aug 8	Premium Addons for Elementor <= 4.10.38 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion and Arbitrary Title Update Affected: through 4.10.38
CVE-2024-6434	4.3	1%	Jul 4	Premium Addons for Elementor <= 4.10.35 - Regular Expressions Denial of Service Affected: through 4.10.35
CVE-2024-4205	4.3	0%	May 31	Premium Addons for Elementor <= 4.10.31 - Missing Authorization to Information Disclosure Affected: through 4.10.31