Login Request a demo
EA
Product
Essential Addons for Elementor – Popular Elementor Templates & Widgets
by wpdevteam · last CVE Jul 21, 2026
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 1Medium 5Low 0
Severity
All severities6Critical0High1Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Essential Addons for Elementor – Popular Elementor Templates & Widgets to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-15155
8.8
1%
Jul 11
Essential Addons for Elementor <= 6.6.10 - Authenticated (Contributor+) Account Takeover via Email Header Injection
Affected: through 6.6.10
CVE-2026-5193
6.5
0%
May 14
Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_user
Affected: through 6.5.13
CVE-2026-15145
6.4
0%
Jul 21
Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget
Affected: through 6.6.11
CVE-2026-15156
6.4
0%
Jul 21
Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reading Progress Global Color Settings
Affected: through 6.6.11
CVE-2026-6459
6.4
0%
Jul 8
Essential Addons for Elementor <= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget Popup
Affected: through 6.6.2
CVE-2026-7665
5.3
7%
Jun 6
Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler
Affected: through 6.6.4
Showing 6