TP
Product
The Plus Addons For Elementor
37
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 5Medium 29Low 0
Watch
Add The Plus Addons For Elementor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-4332 | 6.5 | Mar 7 | The Plus Addons for Elementor plugin for WordPress is vulnerable to arbitrary file reads in versions up to, and including 4.1.9 (pro) and 2.0.6 (free) Affected: through 2.0.6; through 4.1.9 |
| CVE-2024-2210 | 6.4 | Mar 27 | The The Plus Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.4.1 via the Team Member Listing widget Affected: before 5.4.2; before 5.4.2 |
| CVE-2024-5344 | 6.1 | Jun 21 | The The Plus Addons for Elementor Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘forgoturl’ attribute within the plugin's WP Login &… Affected: before 5.6.0 |
| CVE-2021-24358 | 6.1 | Jun 14 | The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.10 did not validate a redirect parameter on a specifically crafted URL before redirecting the user to it,… Affected: before 4.1.10 |
| CVE-2021-24351 | 6.1 | Jun 14 | The theplus_more_post AJAX action of The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.12 did not properly sanitise some of its fields, leading to a reflected… Affected: before 4.1.12 |
| CVE-2025-1287 | 5.4 | Mar 8 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets Affected: before 6.2.3 |
| CVE-2024-11829 | 5.4 | Feb 1 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 6.2.0 |
| CVE-2024-53823 | 5.4 | Dec 6 | WordPress The Plus Addons for Elementor plugin <= 5.6.14 - Cross Site Scripting (XSS) vulnerability Affected: through 5.6.14 |
| CVE-2024-43977 | 5.4 | Sep 17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite… Affected: before 5.6.3 |
| CVE-2024-5583 | 5.4 | Aug 22 | The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.6.3 |
| CVE-2024-6575 | 5.4 | Aug 20 | The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.6.3 |
| CVE-2024-5763 | 5.4 | Aug 20 | The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.6.3 |
| CVE-2024-4482 | 5.4 | Jul 3 | The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.6.2 |
| CVE-2024-4983 | 5.4 | Jun 27 | The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.6.1; before 5.6.1 |
| CVE-2024-35709 | 5.4 | Jun 8 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite… Affected: before 5.5.5 |
| CVE-2024-5341 | 5.4 | May 30 | The The Plus Addons for Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'size' attribute of the Heading Title widget in all… Affected: before 5.5.0 |
| CVE-2024-4485 | 5.4 | May 24 | The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.5.3 |
| CVE-2024-4484 | 5.4 | May 24 | The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.5.3 |
| CVE-2024-3718 | 5.4 | May 24 | The The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's widgets all versions up to, and including, 5.5.4… Affected: before 5.5.5; before 5.5.5 |
| CVE-2024-2784 | 5.4 | May 24 | The The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Hover Card widget in all versions up to, and including, 5.5.4 due to… Affected: before 5.5.5 |
| CVE-2024-2785 | 5.4 | May 14 | The The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Age Gate widget in all versions up to, and including, 5.4.2 due to… Affected: before 5.5.0; before 5.5.0 |
| CVE-2024-0445 | 5.4 | May 14 | The The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's element attributes in all versions up to, and including, 5.4.2… Affected: before 5.5.0; before 5.5.0 |
| CVE-2024-34373 | 5.4 | May 6 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite… Affected: before 5.5.0 |
| CVE-2024-3199 | 5.4 | May 2 | The The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the countdown widget in all versions up to, and including, 5.4.2 due to… Affected: before 5.5.0; before 5.5.0 |
| CVE-2024-3197 | 5.4 | May 2 | The The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom attributes in the plugin's widgets in all versions up to, and… Affected: before 5.5.0; before 5.5.0 |
| CVE-2024-1419 | 5.4 | Mar 7 | The The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ attribute of the Header Meta Content widget in all versions up… Affected: before 5.4.1; before 5.4.1 |
| CVE-2021-24359 | 5.3 | Jun 14 | The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.11 did not properly check that a user requesting a password reset was the legitimate user, allowing an… Affected: before 4.1.11 |
| CVE-2024-10365 | 4.3 | Nov 20 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates Affected: before 6.0.4 |
| CVE-2024-8913 | 4.3 | Oct 11 | The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all… Affected: before 5.6.12 |
Showing 29