LE
Vendor
Leap13
57
CVEs
0
On KEV
1
New 30D
Products
PA8.8
Premium Addons for Elementor
Leap13
39 CVEs0 on KEV1 new
PA8.8
Premium Addons
Leap13
8 CVEs0 on KEV0 new
PA5.4
Premium Addons for Elementor – Powerful Elementor Templates & Widgets
leap13
6 CVEs0 on KEV0 new
PB6.5
Premium Blocks – Gutenberg Blocks for WordPress
Leap13
2 CVEs0 on KEV0 new
DE4.3
Disable Elementor Editor Translation
Leap13
1 CVEs0 on KEV0 new
PB5.4
Premium Blocks For Gutenburg
Leap13
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-62078 | PA Premium Addons for Elementor Leap13 | 6.5 | Sep 30 | WordPress Premium Addons for Elementor plugin <= 4.11.105 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-94168 | PA Premium Addons for Elementor Leap13 | 6.5 | Sep 23 | WordPress Premium Addons for Elementor plugin <= 4.11.105 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-94118 | PB Premium Blocks – Gutenberg Blocks for WordPress Leap13 | 6.5 | Sep 23 | WordPress Premium Blocks – Gutenberg Blocks for WordPress plugin <= 2.3.17 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-12141 | PA Premium Addons for Elementor – Powerful Elementor Templates & Widgets leap13 | 4.9 | Jul 11 | Premium Addons for Elementor <= 4.11.84 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'premium_tooltip_text' Parameter |
| CVE-2026-4790 | PA Premium Addons for Elementor – Powerful Elementor Templates & Widgets leap13 | 5.4 | May 2 | Premium Addons for Elementor <= 4.11.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_svg' Parameter |
| CVE-2025-69300 | PA Premium Addons for Elementor Leap13 | 5.4 | Jan 22 | WordPress Premium Addons for Elementor plugin <= 4.11.63 - Settings Change vulnerability |
| CVE-2025-68494 | PA Premium Addons for Elementor Leap13 | 5.3 | Dec 24 | WordPress Premium Addons for Elementor plugin <= 4.11.53 - Sensitive Data Exposure vulnerability |
| CVE-2025-14163 | PA Premium Addons for Elementor – Powerful Elementor Templates & Widgets leap13 | 4.3 | Dec 23 | Premium Addons for Elementor <= 4.11.53 - Cross-Site Request Forgery via 'insert_inner_template' |
| CVE-2025-14155 | PA Premium Addons for Elementor – Powerful Elementor Templates & Widgets leap13 | 5.3 | Dec 23 | Premium Addons for Elementor <= 4.11.53 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'get_template_content' |
| CVE-2024-11937 | PA Premium Addons for Elementor – Powerful Elementor Templates & Widgets leap13 | 5.4 | Jul 4 | Premium Addons for Elementor <= 4.10.69 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-4774 | PA Premium Addons for Elementor – Powerful Elementor Templates & Widgets leap13 | 5.4 | Jun 10 | Premium Addons for Elementor <= 4.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget |
| CVE-2025-22671 | DE Disable Elementor Editor Translation Leap13 | 4.3 | Mar 27 | WordPress Disable Elementor Editor Translation plugin <= 1.0.2 - Broken Access Control vulnerability |
| CVE-2024-56245 | PB Premium Blocks – Gutenberg Blocks for WordPress Leap13 | 6.5 | Jan 2 | WordPress Premium Blocks plugin <= 2.1.42 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-56225 | PA Premium Addons for Elementor Leap13 | 8.8 | Dec 31 | WordPress Premium Addons for Elementor plugin <= 4.10.56 - Broken Access Control vulnerability |
| CVE-2024-10266 | PA Premium Addons For Elementor Leap13 | 5.4 | Oct 29 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video Box widget in all versions up to, and including, 4.10.60… |
| CVE-2021-4445 | PA Premium Addons For Elementor Leap13 | 4.3 | Oct 16 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Arbitrary Option Updates in versions up to, and including, 4.5.1 |
| CVE-2024-8681 | PA Premium Addons For Elementor Leap13 | 5.4 | Sep 27 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Media Grid widget in all versions up to, and including, 4.10.52… |
| CVE-2024-6824 | PA Premium Addons For Elementor Leap13 | 4.3 | Aug 8 | The Premium Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'check_temp_validity'… |
| CVE-2024-37519 | PB Premium Blocks For Gutenburg Leap13 | 5.4 | Jul 21 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Blocks – Gutenberg Blocks for WordPress… |
| CVE-2024-37922 | PA Premium Addons For Elementor Leap13 | 5.4 | Jul 20 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor.This issue… |
| CVE-2024-6495 | PA Premium Addons For Elementor Leap13 | 5.4 | Jul 12 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Animated Text widget in all versions up to, and including,… |
| CVE-2024-6434 | PA Premium Addons For Elementor Leap13 | 4.3 | Jul 4 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Regular Expression Denial of Service (ReDoS) in all versions up to, and including, 4.10.35 |
| CVE-2024-6340 | PA Premium Addons For Elementor Leap13 | 5.4 | Jul 3 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown widget in all versions up to, and including, 4.10.36… |
| CVE-2023-37869 | PA Premium Addons Leap13 | 8.8 | Jun 19 | Missing Authorization vulnerability in Premium Addons Premium Addons PRO.This issue affects Premium Addons PRO: from n/a through 2.9.0 |
| CVE-2024-5553 | PA Premium Addons For Elementor Leap13 | 5.4 | Jun 12 | The Premium Addons for Elementor plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via several parameters in all versions up to, and including, 4.10.33… |
| CVE-2024-4379 | PA Premium Addons For Elementor Leap13 | 5.4 | May 31 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Global Tooltip widget in all versions up to, and including,… |
| CVE-2024-4376 | PA Premium Addons For Elementor Leap13 | 5.4 | May 31 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Fancy Text widget in all versions up to, and including, 4.10.31… |
| CVE-2024-4205 | PA Premium Addons For Elementor Leap13 | 4.3 | May 31 | The Premium Addons for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_template_content() function in all… |
| CVE-2024-4378 | PA Premium Addons For Elementor Leap13 | 5.4 | May 23 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's menu and shape widgets in all versions up to, and including,… |
| CVE-2024-4203 | PA Premium Addons For Elementor Leap13 | 5.4 | May 2 | The Premium Addons Pro for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the maps widget in all versions up to, and including, 4.10.30 due to… |
| CVE-2024-3885 | PA Premium Addons For Elementor Leap13 | 5.4 | May 2 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the subcontainer value parameter in all versions up to, and including,… |
| CVE-2024-3647 | PA Premium Addons For Elementor Leap13 | 6.4 | May 2 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's post ticker widget in all versions up to, and including,… |
| CVE-2024-32791 | PA Premium Addons For Elementor Leap13 | 5.4 | Apr 24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor.This issue… |
| CVE-2024-31278 | PA Premium Addons For Elementor Leap13 | 6.5 | Apr 10 | Insertion of Sensitive Information Into Sent Data vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor.This issue affects Premium Addons for… |
| CVE-2024-2666 | PA Premium Addons For Elementor Leap13 | 5.4 | Apr 10 | The Premium Addons for Elementor plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the plugin's Bullet List Widget in all versions up to, and… |
| CVE-2024-2665 | PA Premium Addons For Elementor Leap13 | 6.4 | Apr 10 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's button in all versions up to, and including, 4.10.27 due to… |
| CVE-2024-2664 | PA Premium Addons For Elementor Leap13 | 6.4 | Apr 10 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown Widget in all versions up to, and including, 4.10.24… |
| CVE-2024-0376 | PA Premium Addons For Elementor Leap13 | 5.4 | Apr 9 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Wrapper Link Widget in all versions up to, and including,… |
| CVE-2024-29106 | PA Premium Addons For Elementor Leap13 | 5.4 | Mar 19 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Addons for Elementor allows Stored XSS.This issue affects… |
| CVE-2024-2399 | PA Premium Addons For Elementor Leap13 | 5.4 | Mar 15 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and including, 4.10.23 due to… |
| CVE-2024-2239 | PA Premium Addons Leap13 | 5.4 | Mar 13 | The Premium Addons PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Premium Magic Scroll module in all versions up to, and including, 2.9.12 due to… |
| CVE-2024-2238 | PA Premium Addons Leap13 | 5.4 | Mar 13 | The Premium Addons PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom Mouse Cursor module in all versions up to, and including, 2.9.12 due to… |
| CVE-2024-2237 | PA Premium Addons Leap13 | 5.4 | Mar 13 | The Premium Addons PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Global Badge module in all versions up to, and including, 2.9.12 due to… |
| CVE-2024-2000 | PA Premium Addons Leap13 | 5.4 | Mar 13 | The Premium Addons PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'navigation_dots' parameter of the Multi Scroll Widget in all versions up to, and… |
| CVE-2024-1997 | PA Premium Addons Leap13 | 5.4 | Mar 13 | The Premium Addons PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'premium_fbchat_app_id' parameter of the Messenger Chat Widget in all versions up… |
| CVE-2024-1996 | PA Premium Addons Leap13 | 5.4 | Mar 13 | The Premium Addons PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's IHover widget link in all versions up to, and including, 2.9.12 due to… |
| CVE-2024-1680 | PA Premium Addons For Elementor Leap13 | 5.4 | Mar 13 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Settings URL of the Banner, Team Members, and Image Scroll widgets… |
| CVE-2024-0326 | PA Premium Addons For Elementor Leap13 | 6.4 | Mar 13 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Link Wrapper functionality in all versions up to, and… |
| CVE-2024-1242 | PA Premium Addons For Elementor Leap13 | 6.4 | Feb 29 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button onclick attribute in all versions up to, and including, 4.10.18… |
| CVE-2024-24831 | PA Premium Addons For Elementor Leap13 | 5.4 | Feb 10 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor.This issue… |
| CVE-2023-37868 | PA Premium Addons Leap13 | 6.5 | Nov 30 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Leap13 Premium Addons PRO.This issue affects Premium Addons PRO: from n/a through 2.9.0 |
| CVE-2023-34012 | PA Premium Addons For Elementor Leap13 | 6.1 | Jun 23 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Premium Addons for Elementor Premium Addons PRO plugin <= 2.8.24 versions |
| CVE-2021-24257 | PA Premium Addons For Elementor Leap13 | 5.4 | May 5 | The “Premium Addons for Elementor” WordPress Plugin before 4.2.8 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as… |
