themelooks Enter Addons – Ultimate Template Builder for Elementor vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Latest themelooks Enter Addons – Ultimate Template Builder for Elementor vulnerabilities

CVE-2026-25014 — WordPress Enter Addons plugin <= 2.3.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
CVE-2025-8687 — Enter Addons <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown and Image Comparison Widgets (CVSS 6.4)
CVE-2024-56252 — WordPress Enter Addons plugin <= 2.1.9 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
CVE-2024-10868 — Enter Addons – Ultimate Template Builder for Elementor <= 2.1.9 - Authenticated (Contributor+) Post Disclosure (CVSS 4.3)
CVE-2024-47625 — WordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
CVE-2024-7611 — Enter Addons – Ultimate Template Builder for Elementor <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Events Card Widget (CVSS 5.4)
CVE-2024-43225 — WordPress Enter Addons plugin <= 2.1.7 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
CVE-2024-37263 — WordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
CVE-2024-3831 — Enter Addons – Ultimate Template Builder for Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading widget (CVSS 5.4)
CVE-2024-3680 — Enter Addons – Ultimate Template Builder for Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animation Title widget img tag (CVSS 5.4)