ideaboxcreations PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) vulnerabilities

19 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your ideaboxcreations PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) version is affected

Latest ideaboxcreations PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) vulnerabilities

CVE-2026-114182 — WordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Broken Access Control vulnerability (CVSS 4.3)
CVE-2026-111400 — WordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
CVE-2026-108488 — WordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
CVE-2026-32430 — WordPress PowerPack Addons for Elementor plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
CVE-2024-24844 — WordPress PowerPack Pro for Elementor plugin <= 2.10.6 - Unauthenticated Plugin Settings Reset vulnerability (CVSS 7.5)
CVE-2025-8388 — PowerPack Lite for Elementor <= 2.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Via 'cursor_url' (CVSS 6.4)
CVE-2025-1512 — PowerPack Elementor Addons (Free Widgets, Extensions and Templates) <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
CVE-2024-10692 — PowerPack Elementor Addons (Free Widgets, Extensions and Templates) <= 2.8.1 - Authenticated (Contributor+) Post Disclosure (CVSS 4.3)
CVE-2024-5787 — PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Effects Widget (CVSS 5.4)
CVE-2024-3668 — PowerPack Pro for Elementor <= 2.10.17 - Authenticated (Contributor+) Privilege Escalation (CVSS 8.8)
CVE-2024-5327 — PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting (CVSS 5.4)
CVE-2024-2492 — PowerPack Addons for Elementor <= 2.7.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Tweet Widget (CVSS 5.4)
CVE-2024-2491 — PowerPack Addons for Elementor <= 2.7.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via *_html_tag* (CVSS 5.4)
CVE-2024-1411 — PowerPack Addons for Elementor <= 2.7.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Buttons Widget (CVSS 5.4)
CVE-2024-1055 — PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
CVE-2023-6984 — PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.13 - Cross-Site Request Forgery (CVSS 4.3)
CVE-2023-49739 — WordPress PowerPack Pro for Elementor plugin <= 2.9.23 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
CVE-2021-25027 — PowerPack Addons for Elementor < 2.6.2 - Reflected Cross-Site Scripting (CVSS 6.1)
CVE-2021-24263 — PowerPack Addons for Elementor < 2.3.2 - Contributor+ Stored XSS (CVSS 5.4)