What’s Vulnerable › Products

wpvibes Addon Elements for Elementor (formerly Elementor Addon Elements) vulnerabilities

29 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your wpvibes Addon Elements for Elementor (formerly Elementor Addon Elements) version is affected

Latest wpvibes Addon Elements for Elementor (formerly Elementor Addon Elements) vulnerabilities

• CVE-2026-114184 — WordPress Elementor Addon Elements plugin <= 1.14.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2026-28131 — WordPress Elementor Addon Elements plugin <= 1.14.4 - Sensitive Data Exposure vulnerability (CVSS 6.5)
• CVE-2025-12537 — Addon Elements for Elementor <= 1.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
• CVE-2024-13215 — Elementor Addon Elements <= 1.13.10 - Authenticated (Contributor+) Sensitive Information Exposure via Modal Popup (CVSS 4.3)
• CVE-2024-47361 — WordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerability (CVSS 8.8)
• CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
• CVE-2024-8902 — Elementor Addon Elements <= 1.13.8 - Authenticated (Contributor+) Sensitive Information Exposure via table_saved_sections (CVSS 4.3)
• CVE-2024-47366 — WordPress Elementor Addon Elements plugin <= 1.13.6 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-7122 — Elementor Addon Elements <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets (CVSS 5.4)
• CVE-2024-4401 — Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and eae_slider_animation Parameters (CVSS 5.4)
• CVE-2024-4570 — Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-4569 — Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-2092 — Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widget (CVSS 5.4)
• CVE-2024-3743 — Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-2792 — Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Text Separator' and 'Image Compare' Widget (CVSS 6.4)
• CVE-2024-30422 — WordPress Elementor Addon Elements plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-2091 — Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 4.6)
• CVE-2024-29107 — WordPress Elementor Addon Elements plugin <= 1.12.10 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-1422 — Elementor Addon Elements <= 1.12.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Modal Popup effet (CVSS 5.4)
• CVE-2024-1393 — Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Switcher Widget (CVSS 5.4)
• CVE-2024-1392 — Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dual Button Widget (CVSS 5.4)
• CVE-2024-1391 — Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Thumbnail Slider Widget (CVSS 5.4)
• CVE-2024-1358 — Elementor Addon Elements <= 1.12.12 - Directory Traversal to Local File Inclusion (CVSS 6.5)
• CVE-2024-0834 — (CVSS 5.4)
• CVE-2023-5381 — Elementor Addon Elements <= 1.12.7 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 4.8)