What’s Vulnerable › Products

smub aThemes Addons for Elementor vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your smub aThemes Addons for Elementor version is affected

Latest smub aThemes Addons for Elementor vulnerabilities

• CVE-2026-8613 — aThemes Addons for Elementor <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Widget Setting (CVSS 6.4)
• CVE-2025-12837 — aThemes Addons for Elementor <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call To Action Widget (CVSS 6.4)
• CVE-2025-60112 — WordPress aThemes Addons for Elementor Plugin <= 1.1.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
• CVE-2025-8149 — aThemes Addons for Elementor Lite <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget (CVSS 6.4)
• CVE-2025-32158 — WordPress aThemes Addons for Elementor plugin <= 1.1.3 - Local File Inclusion vulnerability (CVSS 8.8)
• CVE-2025-22646 — WordPress aThemes Addons for Elementor plugin <= 1.0.8 - Stored Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-13547 — aThemes Addons for Elementor <= 1.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-51675 — WordPress aThemes Addons for Elementor plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)