What’s Vulnerable › Products

Livemesh Addons by Elementor vulnerabilities

22 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Livemesh Addons by Elementor version is affected

Latest Livemesh Addons by Elementor vulnerabilities

• CVE-2026-1620 — Livemesh Addons by Elementor <= 9.0 - Authenticated (Contributor+) Local File Inclusion via Widget Template Parameter (CVSS 8.8)
• CVE-2026-1572 — Livemesh Addons by Elementor <= 9.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via Plugin Settings (CVSS 6.4)
• CVE-2026-39636 — WordPress Livemesh Addons for Elementor plugin <= 9.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
• CVE-2024-8858 — Elementor Addons by Livemesh <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via piechart_settings Parameter (CVSS 5.4)
• CVE-2024-47303 — WordPress Elementor Addons by Livemesh plugin <= 8.5 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-3639 — Elementor Addons by Livemesh <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Grid (CVSS 5.4)
• CVE-2024-3638 — Elementor Addons by Livemesh <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Marquee Text Widget, Testimonials Widget, and Testimonial Slider Widgets (CVSS 5.4)
• CVE-2024-2926 — Elementor Addons by Livemesh <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Various Widgets (CVSS 5.4)
• CVE-2024-2385 — Elementor Addons by Livemesh <= 8.4 - Authenticated (Contributor+) Limited Local File Inclusion via Widgets (CVSS 8.8)
• CVE-2024-2655 — Elementor Addons by Livemesh <= 8.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name (CVSS 5.4)
• CVE-2024-2539 — Elementor Addons by Livemesh <= 8.3.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget _id attribute (CVSS 5.4)
• CVE-2024-1466 — Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Multislider Widget (CVSS 5.4)
• CVE-2024-1465 — Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Carousel Widget (CVSS 5.4)
• CVE-2024-1464 — Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Slider Widget (CVSS 5.4)
• CVE-2024-1461 — Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget (CVSS 5.4)
• CVE-2024-1458 — Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Widget (CVSS 5.4)
• CVE-2024-25598 — WordPress Elementor Addons by Livemesh plugin <= 8.3 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-27986 — WordPress Livemesh Addons for Elementor Plugin <= 8.3.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)
• CVE-2024-1235 — Elementor Addons by Livemesh <= 8.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2022-3862 — Livemesh Addons for Elementor < 7.2.4 - Admin+ Stored XSS (CVSS 4.8)
• CVE-2021-24260 — Livemesh Addons for Elementor < 6.8 - Contributor+ Stored XSS (CVSS 5.4)