MA
Product
Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits
15
CVEs
0
On KEV
6.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 15Low 0
Watch
Add Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-9281 | 6.4 | Jun 6 | Master Addons For Elementor <= 3.1.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'jtlma_custom_js' Page Setting (Custom JS Extension) Affected: through 3.1.0 |
| CVE-2026-2486 | 6.4 | Feb 20 | Master Addons For Elementor <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ma_el_bh_table_btn_text' Affected: through 2.1.1 |
| CVE-2025-8874 | 6.4 | Aug 12 | Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox Affected: through 2.0.9.0 |
| CVE-2025-5284 | 6.4 | Jul 16 | Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 2.0.8.2 |
| CVE-2024-13362 | 6.1 | May 1 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter Affected: through 2.0.7.2 |
| CVE-2024-5542 | 6.1 | Jun 7 | Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via Navigation Menu Widget Affected: through 2.0.6.1 |
| CVE-2025-0433 | 5.4 | Mar 4 | Master Addons <= 2.0.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter Affected: through 2.0.7.1 |
| CVE-2024-9618 | 5.4 | Mar 4 | Master Addons <= 2.0.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets Affected: through 2.0.7.2 |
| CVE-2024-9502 | 5.4 | Jan 7 | Master Addons -- Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip Module Affected: through 2.0.6.7 |
| CVE-2024-6282 | 5.4 | Sep 10 | Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via data-jltma-wrapper-link Element Affected: through 2.0.6.4 |
| CVE-2024-3134 | 5.4 | May 16 | Master Addons for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 2.0.6.0 |
| CVE-2024-4580 | 5.4 | May 16 | Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 2.0.6.0 |
| CVE-2024-4265 | 5.4 | May 2 | Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.5.9 - Contributor+ Stored Cross-Site Scripting Affected: through 2.0.5.9 |
| CVE-2024-2139 | 5.4 | Mar 27 | Master Addons for Elementor <= 2.0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget Affected: through 2.0.5.6 |
| CVE-2024-5382 | 5.3 | Jun 7 | Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to MA Template Creation or Modification Affected: through 2.0.6.1 |
Showing 15