Addon Elements for Elementor (formerly Elementor Addon Elements) vulnerabilities

Product

Addon Elements for Elementor (formerly Elementor Addon Elements)

by wpvibes · last CVE Dec 14, 2025

CVEs

On KEV

6.5

Max CVSS

New 30D

Vulnerabilities16 In the news0 Timeline

Severity mix

Critical 0High 0Medium 16Low 0

Severity

All severities16 Critical0 High0 Medium16 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Addon Elements for Elementor (formerly Elementor Addon Elements) to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-1358	6.5	1%	Mar 13	Elementor Addon Elements <= 1.12.12 - Directory Traversal to Local File Inclusion Affected: through 1.12.12
CVE-2025-12537	6.4	0%	Dec 14	Addon Elements for Elementor <= 1.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 1.14.3
CVE-2024-2792	6.4	0%	Apr 9	Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Text Separator' and 'Image Compare' Widget Affected: through 1.13.2
CVE-2024-7122	5.4	0%	Aug 30	Elementor Addon Elements <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets Affected: through 1.13.6
CVE-2024-4401	5.4	0%	Aug 30	Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and eae_slider_animation Parameters Affected: through 1.13.5
CVE-2024-4570	5.4	0%	Jun 27	Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 1.13.5
CVE-2024-4569	5.4	0%	Jun 27	Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 1.13.5
CVE-2024-2092	5.4	0%	Jun 12	Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widget Affected: through 1.13.3
CVE-2024-3743	5.4	1%	May 2	Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 1.13.3
CVE-2024-1393	5.4	1%	Mar 13	Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Switcher Widget Affected: through 1.12.12
CVE-2024-1391	5.4	1%	Mar 13	Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Thumbnail Slider Widget Affected: through 1.12.12
CVE-2024-1422	5.4	0%	Mar 13	Elementor Addon Elements <= 1.12.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Modal Popup effet Affected: through 1.12.12
CVE-2024-1392	5.4	1%	Mar 13	Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dual Button Widget Affected: through 1.12.12
CVE-2024-2091	4.6	1%	Mar 28	Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 1.13.2
CVE-2024-13215	4.3	1%	Jan 15	Elementor Addon Elements <= 1.13.10 - Authenticated (Contributor+) Sensitive Information Exposure via Modal Popup Affected: through 1.13.10
CVE-2024-8902	4.3	0%	Oct 12	Elementor Addon Elements <= 1.13.8 - Authenticated (Contributor+) Sensitive Information Exposure via table_saved_sections Affected: through 1.13.8