Essential Addons for Elementor – Popular Elementor Templates & Widgets vulnerabilities

Product

Essential Addons for Elementor – Popular Elementor Templates & Widgets

by wpdevteam · last CVE Jul 21, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 7Low 0

Severity

Exploitation

Watch

Add Essential Addons for Elementor – Popular Elementor Templates & Widgets to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-5193	6.5	0%	May 14	Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_user Affected: through 6.5.13
CVE-2026-15145	6.4	0%	Jul 21	Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget Affected: through 6.6.11
CVE-2026-15156	6.4	0%	Jul 21	Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reading Progress Global Color Settings Affected: through 6.6.11
CVE-2026-6459	6.4	0%	Jul 8	Essential Addons for Elementor <= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget Popup Affected: through 6.6.2
CVE-2026-1512	6.4	0%	Feb 14	Essential Addons for Elementor <= 6.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Box Widget Affected: through 6.5.9
CVE-2026-7665	5.3	7%	Jun 6	Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler Affected: through 6.6.4
CVE-2026-1004	5.3	0%	Jan 16	Essential Addons for Elementor <= 6.5.5 - Missing Authorization to Unauthenticated Sensitive Information Exposure Affected: through 6.5.5