Skip to contentWpdeveloper Essential Addons For Elementor vulnerabilities
- unknown essential addons for elementorEssential Addons for Elementor 6.6.0 - 6.8.7 - Author+ Privilege Escalation via register_user_roleCVE-2026-1108084.2 Medium
- unknown essential addons for elementorEssential Addons for Elementor 6.7.3 - 6.8.6 - Unauthenticated Registration Approval Bypass via OTP VerificationCVE-2026-1105085.3 Medium
- unknown essential addons for elementorEssential Addons for Elementor < 6.8.7 - Unauthenticated Private Post Meta Disclosure via load_more AJAX HandlerCVE-2026-1105095.3 Medium
- unknown essential addons for elementorEssential Addons for Elementor < 6.8.7 - Admin+ Cross-Site User Approval State Change via Bulk ActionCVE-2026-1105373.8 Low
- unknown essential addons for elementorEssential Addons for Elementor < 6.8.7 - Author+ Content Injection via Pricing Table and Post Timeline Title TagCVE-2026-1105103.5 Low
- wpdeveloper essential addons for elementorWordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerabilityCVE-2026-1108986.4 Medium
- wpdeveloper essential addons for elementorWordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1023946.5 Medium
- wpdeveloper essential addons for elementorWordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerabilityCVE-2026-817775.3 Medium
- unknown essential addons for elementorEssential Addons for Elementor < 6.7.2 - Unauthenticated Privilege Escalation via Custom Profile Field Mass AssignmentCVE-2026-180398.1 High
- unknown essential addons for elementorEssential Addons for Elementor - Lite < 6.6.10 - Unauthenticated Draft/Private WooCommerce Product Disclosure via Compare TableCVE-2026-133455.3 Medium
- unknown essential addons for elementorEssential Addons for Elementor - Lite < 6.6.10 - Contributor+ Stored XSS via Pricing Table Title TagCVE-2026-133444.8 Medium
- wpdeveloper essential addons for elementorWordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerabilityCVE-2026-254405.3 Medium
- wpdeveloper essential addons for elementorWordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerabilityCVE-2026-235435.3 Medium
- wpdeveloper essential addons for elementorWordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-690926.5 Medium
- wpdeveloper essential addons for elementorWordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerabilityCVE-2025-643522.7 Low
- wpdeveloper essential addons for elementorWordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-24752Public exploit7.1 High
- wpdeveloper essential addons for elementorWordPress Essential Addons for Elementor plugin <= 6.1.9 - Sensitive Data Exposure VulnerabilityCVE-2025-395894.3 Medium
- wpdeveloper essential addons for elementorWordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-395906.5 Medium
- wpdeveloper essential addons for elementorWordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-560636.5 Medium
- wpdeveloper essential addons for elementorWordPress Essential Addons for Elementor plugin <= 5.9.26 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-396496.5 Medium
- wpdeveloper essential addons for elementorWordPress Essential Addons for Elementor plugin <= 5.8.8 - Contributor+ Privilege Escalation vulnerabilityCVE-2023-419558.8 High
- essential addons for elementor pro, wpdeveloper essential addons for elementor pro, essential addons for elementor +2 moreWordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Server Side Request Forgery (SSRF)CVE-2023-322455.4 Medium
- essential addons for elementor pro, wpdeveloper essential addons for elementor pro, essential addons for elementor +2 moreWordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Cross Site Scripting (XSS)CVE-2023-322417.1 High
- wpdeveloper essential addons for elementorWordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege EscalationCVE-2023-32243Public exploitEPSS 75.5%9.8 Critical
- unknown essential addons for elementorEssential Addons for Elementor < 5.0.5 - Unauthenticated LFICVE-2022-03209.8 Critical
- unknown essential addons for elementorEssential Addons for Elementor < 4.5.4 - Contributor+ Stored Cross-Site Scripting (XSS)CVE-2021-242555.4 Medium