What’s Vulnerable › Products
timstrifler Exclusive Addons for Elementor vulnerabilities
26 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.
Check whether your timstrifler Exclusive Addons for Elementor version is affected
Latest timstrifler Exclusive Addons for Elementor vulnerabilities
- CVE-2026-12231 — Exclusive Addons for Elementor <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'exad_infobox_image' (CVSS 6.4)
- CVE-2026-66438 — WordPress Exclusive Addons Elementor plugin <= 2.8.0 - Sensitive Data Exposure vulnerability (CVSS 5.3)
- CVE-2026-11328 — Exclusive Addons for Elementor <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title (CVSS 6.4)
- CVE-2026-59511 — WordPress Exclusive Addons Elementor plugin <= 2.7.9.9 - Sensitive Data Exposure vulnerability (CVSS 5.3)
- CVE-2026-57620 — WordPress Exclusive Addons Elementor plugin <= 2.7.9.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2025-7498 — Exclusive Addons for Elementor <= 2.7.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown (CVSS 5.4)
- CVE-2025-4783 — Exclusive Addons for Elementor <= 2.7.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget (CVSS 5.4)
- CVE-2025-48244 — WordPress Exclusive Addons Elementor plugin <= 2.7.9 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9)
- CVE-2025-1571 — Exclusive Addons for Elementor <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Image Comparison Widgets (CVSS 5.4)
- CVE-2024-10312 — Exclusive Addons for Elementor <= 2.7.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates (CVSS 4.3)
- CVE-2024-49292 — WordPress Exclusive Addons for Elementor plugin <= 2.7.1 - Cross-Site Scripting vulnerability (CVSS 5.4)
- CVE-2024-5332 — Exclusive Addons for Elementor <= 2.6.9.8 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Card Widget (CVSS 5.4)
- CVE-2024-4618 — Exclusive Addons for Elementor <= 2.6.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget (CVSS 5.4)
- CVE-2024-33914 — WordPress Exclusive Addons for Elementor plugin <= 2.6.9.1 - Broken Access Control on Post Duplication vulnerability (CVSS 9.8)
- CVE-2024-3985 — Exclusive Addons for Elementor <= 2.6.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call to Action (CVSS 5.4)
- CVE-2024-3489 — Exclusive Addons for Elementor <= 2.6.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Expired Title (CVSS 5.4)
- CVE-2024-2751 — Exclusive Addons for Elementor <= 2.6.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via InfoBox (CVSS 5.4)
- CVE-2024-2750 — Exclusive Addons for Elementor <= 2.6.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget (CVSS 5.4)
- CVE-2024-2503 — Exclusive Addons for Elementor <= 2.6.9.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Post Grid (CVSS 5.4)
- CVE-2024-32557 — WordPress Exclusive Addons for Elementor plugin <= 2.6.9.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
- CVE-2024-30177 — WordPress Exclusive Addons for Elementor plugin <= 2.6.8 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
- CVE-2024-30232 — WordPress Exclusive Addons for Elementor plugin <= 2.6.9 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
- CVE-2024-2028 — Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Covid-19 Stats Widget (CVSS 5.4)
- CVE-2024-1414 — Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call To Action Widget (CVSS 5.4)
- CVE-2024-1413 — Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget (CVSS 5.4)