Login Request a demo
MA
Product
Master Addons
by Master-addons · last CVE Mar 4, 2025
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 1High 1Medium 14Low 0
Severity
All severities16Critical1High1Medium14Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Master Addons to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-35660
9.8
0%
Jun 9
WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Broken Access Control on API vulnerability
Affected: before 2.0.5.6
CVE-2024-33595
8.8
0%
Apr 29
WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Broken Access Control on Duplicate Post vulnerability
Affected: before 2.0.5.6
CVE-2024-5542
6.1
0%
Jun 7
Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via Navigation Menu Widget
Affected: before 2.0.6.2
CVE-2025-0433
5.4
0%
Mar 4
Master Addons <= 2.0.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Affected: before 2.0.7.2
CVE-2024-9618
5.4
0%
Mar 4
Master Addons <= 2.0.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Affected: before 2.0.7.3
CVE-2024-9502
5.4
0%
Jan 7
Master Addons -- Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip Module
Affected: before 2.0.6.8
CVE-2024-6282
5.4
0%
Sep 10
Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via data-jltma-wrapper-link Element
Affected: before 2.0.6.5
CVE-2024-35688
5.4
0%
Jun 8
WordPress Master Addons for Elementor plugin <= 2.0.5.9 - Cross Site Scripting (XSS) vulnerability
Affected: before 2.0.6.0
CVE-2024-35702
5.4
0%
Jun 8
WordPress Master Addons for Elementor plugin <= 2.0.6.0 - Cross Site Scripting (XSS) vulnerability
Affected: before 2.0.6.1
CVE-2024-3134
5.4
0%
May 16
Master Addons for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 2.0.6.1
CVE-2024-4580
5.4
0%
May 16
Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 2.0.6.1
CVE-2024-4265
5.4
1%
May 2
Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.5.9 - Contributor+ Stored Cross-Site Scripting
Affected: before 2.0.6.0
CVE-2024-29911
5.4
0%
Mar 27
WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Cross Site Scripting (XSS) vulnerability
Affected: before 2.0.5.6
CVE-2024-2139
5.4
0%
Mar 27
Master Addons for Elementor <= 2.0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget
Affected: before 2.0.5.7
CVE-2024-5382
5.3
0%
Jun 7
Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to MA Template Creation or Modification
Affected: before 2.0.6.2
CVE-2024-38710
4.8
0%
Jul 20
WordPress Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin <= 2.0.6.2 - Cross Site Scripting (XSS) vulnerability
Affected: before 2.0.6.3
Showing 16