What’s Vulnerable › Products

wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets vulnerabilities

76 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 26 published in the last 12 months.

Check whether your wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets version is affected

Latest wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets vulnerabilities

• CVE-2026-110537 — Essential Addons for Elementor < 6.8.7 - Admin+ Cross-Site User Approval State Change via Bulk Action (CVSS 3.8)
• CVE-2026-110510 — Essential Addons for Elementor < 6.8.7 - Author+ Content Injection via Pricing Table and Post Timeline Title Tag (CVSS 3.5)
• CVE-2026-110898 — WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability (CVSS 6.4)
• CVE-2026-102394 — WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2026-81777 — WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability (CVSS 5.3)
• CVE-2026-18039 — Essential Addons for Elementor < 6.7.2 - Unauthenticated Privilege Escalation via Custom Profile Field Mass Assignment (CVSS 8.1)
• CVE-2026-13345 — Essential Addons for Elementor - Lite < 6.6.10 - Unauthenticated Draft/Private WooCommerce Product Disclosure via Compare Table (CVSS 5.3)
• CVE-2026-13344 — Essential Addons for Elementor - Lite < 6.6.10 - Contributor+ Stored XSS via Pricing Table Title Tag (CVSS 4.8)
• CVE-2026-15145 — Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget (CVSS 6.4)
• CVE-2026-15156 — Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reading Progress Global Color Settings (CVSS 6.4)
• CVE-2026-15155 — Essential Addons for Elementor <= 6.6.10 - Authenticated (Contributor+) Account Takeover via Email Header Injection (CVSS 8.8)
• CVE-2026-6459 — Essential Addons for Elementor <= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget Popup (CVSS 6.4)
• CVE-2026-25440 — WordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2026-7665 — Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler (CVSS 5.3)
• CVE-2026-5193 — Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_user (CVSS 6.5)
• CVE-2026-23543 — WordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2026-1512 — Essential Addons for Elementor <= 6.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Box Widget (CVSS 6.4)
• CVE-2026-1004 — Essential Addons for Elementor <= 6.5.5 - Missing Authorization to Unauthenticated Sensitive Information Exposure (CVSS 5.3)
• CVE-2025-69092 — WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-13977 — Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
• CVE-2025-64352 — WordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerability (CVSS 2.7)
• CVE-2025-8451 — Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items' (CVSS 6.4)
• CVE-2025-6244 — Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Calendar` And `Business Reviews` Widgets (CVSS 5.4)
• CVE-2024-5647 — Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library (CVSS 6.4)
• CVE-2024-9994 — Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widget (CVSS 5.4)