What’s Vulnerable › Products

pencilwp X Addons for Elementor vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your pencilwp X Addons for Elementor version is affected

Latest pencilwp X Addons for Elementor vulnerabilities

• CVE-2026-24605 — WordPress X Addons for Elementor plugin <= 1.0.23 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2026-22518 — WordPress X Addons for Elementor plugin <= 1.0.23 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-9204 — X Addons for Elementor <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Youtube Video ID Field (CVSS 6.4)
• CVE-2025-48132 — WordPress X Addons for Elementor plugin <= 1.0.16 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.4)