EA
Product
Essential Addons for Elementor
60
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 2High 5Medium 52Low 1
Watch
Add Essential Addons for Elementor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-32243 | 9.8 | May 12 | Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This issue affects Essential Addons for Elementor: from 5.4.0… Affected: 5.4.0 before 5.7.1 |
| CVE-2022-0320 | 9.8 | Feb 1 | The Essential Addons for Elementor WordPress plugin before 5.0.5 does not validate and sanitise some template data before it them in include statements, which could allow… Affected: before 5.0.5 |
| CVE-2021-4447 | 8.8 | Oct 16 | The Essential Addons for Elementor plugin for WordPress is vulnerable to privilege escalation in versions up to and including 4.6.4 due to a lack of restrictions on who can add a… Affected: before 4.6.5 |
| CVE-2023-41955 | 8.8 | May 17 | Improper Privilege Management vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation.This issue affects Essential Addons for Elementor: from n/a… Affected: before 5.8.9 |
| CVE-2024-3018 | 8.8 | Mar 30 | The Essential Addons for Elementor plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.9.13 via deserialization of untrusted input… Affected: before 5.9.14 |
| CVE-2023-32245 | 8.8 | Nov 18 | Cross-Site Request Forgery (CSRF) vulnerability in WPDeveloper Essential Addons for Elementor Pro.This issue affects Essential Addons for Elementor Pro: from n/a through 5.4.8 Affected: through 5.4.8 |
| CVE-2024-1536 | 7.4 | Mar 13 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.10 |
| CVE-2026-102394 | 6.5 | Oct 1 | WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability Affected: through 6.8.4 |
| CVE-2025-69092 | 6.5 | Dec 30 | WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability Affected: through 6.5.3 |
| CVE-2025-39590 | 6.5 | Apr 16 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor… Affected: before 6.1.10 |
| CVE-2026-110898 | 6.4 | Oct 19 | WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability Affected: through 6.8.5 |
| CVE-2024-4448 | 6.4 | May 14 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.20 |
| CVE-2024-3728 | 6.4 | May 2 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.16 |
| CVE-2024-3645 | 6.4 | Apr 22 | The Essential Addons for Elementor Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Counter widget in all versions up to, and including,… Affected: before 5.8.12 |
| CVE-2024-3333 | 6.4 | Apr 17 | The Essential Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL attributes of widgets in all versions up to, and including, 5.9.14… Affected: before 5.9.15 |
| CVE-2024-2650 | 6.4 | Apr 9 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.11 |
| CVE-2024-2623 | 6.4 | Apr 9 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.12 |
| CVE-2024-1537 | 6.4 | Mar 13 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.10 |
| CVE-2024-1276 | 6.4 | Feb 29 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.9 |
| CVE-2024-1236 | 6.4 | Feb 29 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.9 |
| CVE-2024-0586 | 6.4 | Feb 5 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: through 5.9.4 |
| CVE-2025-24752 | 6.1 | Apr 17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor… Affected: before 6.0.15 |
| CVE-2023-32241 | 6.1 | Aug 29 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPDeveloper Essential Addons for Elementor Pro plugin <= 5.4.8 versions Affected: through 5.4.8 |
| CVE-2022-0683 | 6.1 | Feb 24 | The Essential Addons for Elementor Lite WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the settings parameter found in the… Affected: through 5.0.8 |
| CVE-2024-8979 | 5.7 | Nov 15 | The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in… Affected: before 6.0.10 |
| CVE-2024-8978 | 5.7 | Nov 15 | The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in… Affected: before 6.0.10 |
| CVE-2025-6244 | 5.4 | Jul 8 | The Essential Addons for Elementor – Popular Elementor Templates and Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the via `Calendar` And `Business… Affected: before 6.1.20 |
| CVE-2024-9994 | 5.4 | Jun 7 | The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… Affected: before 6.1.13 |
| CVE-2024-9993 | 5.4 | Jun 7 | The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… Affected: before 6.1.13 |
| CVE-2024-56063 | 5.4 | Dec 31 | WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerability Affected: through 6.0.7 |
| CVE-2024-8961 | 5.4 | Nov 15 | The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… Affected: before 6.0.8 |
| CVE-2024-8742 | 5.4 | Sep 13 | The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… Affected: before 6.0.4 |
| CVE-2024-8440 | 5.4 | Sep 11 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 6.0.4 |
| CVE-2024-7092 | 5.4 | Aug 13 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: through 5.9.27 |
| CVE-2024-39649 | 5.4 | Aug 1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor… Affected: through 5.9.26 |
| CVE-2024-5189 | 5.4 | Jun 11 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.24 |
| CVE-2024-5612 | 5.4 | Jun 7 | The Essential Addons for Elementor Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘eael_lightbox_open_btn_icon’ parameter within the Lightbox &… Affected: before 5.8.16 |
| CVE-2024-5188 | 5.4 | Jun 6 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.23 |
| CVE-2024-5073 | 5.4 | May 30 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.22 |
| CVE-2024-5086 | 5.4 | May 29 | The Essential Addons for Elementor PRO – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.8.15 |
| CVE-2024-4624 | 5.4 | May 14 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugins for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.21 |
| CVE-2024-4449 | 5.4 | May 14 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.20 |
| CVE-2024-4275 | 5.4 | May 14 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.20 |
| CVE-2024-4156 | 5.4 | May 2 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.18 |
| CVE-2024-4003 | 5.4 | May 2 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.16 |
| CVE-2024-1172 | 5.4 | Feb 29 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.9 |
| CVE-2024-1171 | 5.4 | Feb 29 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.9 |
| CVE-2024-0954 | 5.4 | Feb 5 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting through… Affected: through 5.9.7 |
| CVE-2024-0585 | 5.4 | Feb 5 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: through 5.9.4 |
| CVE-2023-7044 | 5.4 | Jan 4 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom ID… Affected: through 5.9.2 |