Essential Addons for Elementor vulnerabilities | LiveThreat CVE Feed

Product

Essential Addons for Elementor

by WPDeveloper · last CVE Oct 19, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities60 In the news0 Timeline

Severity mix

Critical 2High 5Medium 52Low 1

Severity

All severities60 Critical2 High5 Medium52 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Essential Addons for Elementor to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-24255	5.4	1%	May 5	The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as… Affected: before 4.5.4
CVE-2026-81777	5.3	0%	Aug 28	WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability Affected: through 6.8.0
CVE-2026-25440	5.3	0%	Jun 15	WordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerability Affected: before 6.6.0
CVE-2026-23543	5.3	0%	Feb 19	WordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerability Affected: through 6.5.5
CVE-2024-3733	5.3	0%	Apr 25	The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in all… Affected: before 5.9.16
CVE-2024-2974	5.3	0%	Apr 9	The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in… Affected: before 5.9.14
CVE-2023-3779	5.3	1%	Jul 20	The Essential Addons For Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 5.8.1 due to the plugin adding the… Affected: through 5.8.1
CVE-2025-39589	4.3	0%	Apr 16	Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows… Affected: before 6.1.10
CVE-2021-4446	4.3	0%	Oct 16	The Essential Addons for Elementor plugin for WordPress is vulnerable to authorization bypass in versions up to and including 4.6.4 due to missing capability checks and nonce… Affected: before 4.6.5
CVE-2025-64352	2.7	0%	Oct 31	WordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerability Affected: through 6.2.4