What’s Vulnerable › Products

nicheaddons Events Addon for Elementor vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your nicheaddons Events Addon for Elementor version is affected

Latest nicheaddons Events Addon for Elementor vulnerabilities

• CVE-2024-13362 — Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter (CVSS 6.1)
• CVE-2025-8150 — Events Addon for Elementor <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter and Countdown Widgets (CVSS 6.4)
• CVE-2024-12061 — Events Addon for Elementor <= 2.2.3 - Authenticated (Contributor+) Post Disclosure (CVSS 4.3)
• CVE-2024-54315 — WordPress Events Addon for Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-49264 — WordPress Events Addon for Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
• CVE-2024-4669 — Events Addon for Elementor <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets (CVSS 5.4)
• CVE-2023-47827 — WordPress Events Addon for Elementor Plugin <= 2.1.3 is vulnerable to Broken Access Control (CVSS 7.5)