EA
Product
Essential Addons for Elementor
60
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 2High 5Medium 52Low 1
Watch
Add Essential Addons for Elementor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-102394 | 6.5 | Oct 1 | WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability Affected: through 6.8.4 |
| CVE-2025-69092 | 6.5 | Dec 30 | WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability Affected: through 6.5.3 |
| CVE-2025-39590 | 6.5 | Apr 16 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor… Affected: before 6.1.10 |
| CVE-2026-110898 | 6.4 | Oct 19 | WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability Affected: through 6.8.5 |
| CVE-2024-4448 | 6.4 | May 14 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.20 |
| CVE-2024-3728 | 6.4 | May 2 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.16 |
| CVE-2024-3645 | 6.4 | Apr 22 | The Essential Addons for Elementor Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Counter widget in all versions up to, and including,… Affected: before 5.8.12 |
| CVE-2024-3333 | 6.4 | Apr 17 | The Essential Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL attributes of widgets in all versions up to, and including, 5.9.14… Affected: before 5.9.15 |
| CVE-2024-2650 | 6.4 | Apr 9 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.11 |
| CVE-2024-2623 | 6.4 | Apr 9 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.12 |
| CVE-2024-1537 | 6.4 | Mar 13 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.10 |
| CVE-2024-1276 | 6.4 | Feb 29 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.9 |
| CVE-2024-1236 | 6.4 | Feb 29 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.9 |
| CVE-2024-0586 | 6.4 | Feb 5 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: through 5.9.4 |
| CVE-2025-24752 | 6.1 | Apr 17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor… Affected: before 6.0.15 |
| CVE-2023-32241 | 6.1 | Aug 29 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPDeveloper Essential Addons for Elementor Pro plugin <= 5.4.8 versions Affected: through 5.4.8 |
| CVE-2022-0683 | 6.1 | Feb 24 | The Essential Addons for Elementor Lite WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the settings parameter found in the… Affected: through 5.0.8 |
| CVE-2024-8979 | 5.7 | Nov 15 | The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in… Affected: before 6.0.10 |
| CVE-2024-8978 | 5.7 | Nov 15 | The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in… Affected: before 6.0.10 |
| CVE-2025-6244 | 5.4 | Jul 8 | The Essential Addons for Elementor – Popular Elementor Templates and Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the via `Calendar` And `Business… Affected: before 6.1.20 |
| CVE-2024-9994 | 5.4 | Jun 7 | The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… Affected: before 6.1.13 |
| CVE-2024-9993 | 5.4 | Jun 7 | The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… Affected: before 6.1.13 |
| CVE-2024-56063 | 5.4 | Dec 31 | WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerability Affected: through 6.0.7 |
| CVE-2024-8961 | 5.4 | Nov 15 | The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… Affected: before 6.0.8 |
| CVE-2024-8742 | 5.4 | Sep 13 | The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… Affected: before 6.0.4 |
| CVE-2024-8440 | 5.4 | Sep 11 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 6.0.4 |
| CVE-2024-7092 | 5.4 | Aug 13 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: through 5.9.27 |
| CVE-2024-39649 | 5.4 | Aug 1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor… Affected: through 5.9.26 |
| CVE-2024-5189 | 5.4 | Jun 11 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.24 |
| CVE-2024-5612 | 5.4 | Jun 7 | The Essential Addons for Elementor Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘eael_lightbox_open_btn_icon’ parameter within the Lightbox &… Affected: before 5.8.16 |
| CVE-2024-5188 | 5.4 | Jun 6 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.23 |
| CVE-2024-5073 | 5.4 | May 30 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.22 |
| CVE-2024-5086 | 5.4 | May 29 | The Essential Addons for Elementor PRO – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.8.15 |
| CVE-2024-4624 | 5.4 | May 14 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugins for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.21 |
| CVE-2024-4449 | 5.4 | May 14 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.20 |
| CVE-2024-4275 | 5.4 | May 14 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.20 |
| CVE-2024-4156 | 5.4 | May 2 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.18 |
| CVE-2024-4003 | 5.4 | May 2 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.16 |
| CVE-2024-1172 | 5.4 | Feb 29 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.9 |
| CVE-2024-1171 | 5.4 | Feb 29 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: before 5.9.9 |
| CVE-2024-0954 | 5.4 | Feb 5 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting through… Affected: through 5.9.7 |
| CVE-2024-0585 | 5.4 | Feb 5 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… Affected: through 5.9.4 |
| CVE-2023-7044 | 5.4 | Jan 4 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom ID… Affected: through 5.9.2 |
| CVE-2021-24255 | 5.4 | May 5 | The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as… Affected: before 4.5.4 |
| CVE-2026-81777 | 5.3 | Aug 28 | WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability Affected: through 6.8.0 |
| CVE-2026-25440 | 5.3 | Jun 15 | WordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerability Affected: before 6.6.0 |
| CVE-2026-23543 | 5.3 | Feb 19 | WordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerability Affected: through 6.5.5 |
| CVE-2024-3733 | 5.3 | Apr 25 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in all… Affected: before 5.9.16 |
| CVE-2024-2974 | 5.3 | Apr 9 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in… Affected: before 5.9.14 |
| CVE-2023-3779 | 5.3 | Jul 20 | The Essential Addons For Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 5.8.1 due to the plugin adding the… Affected: through 5.8.1 |