Xpro vulnerabilities

Products

• Addons — 140+ Widgets For Elementor 16
• Elementor Addons 9
• Addons For Beaver Builder – Lite 2
• Theme Builder 2

Newest

• xpro elementor addons WordPress Xpro Elementor Addons plugin <= 1.7.10 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-114177 8.8 HighOctober 22, 2026
• unknown xpro addons — 140+ widgets for elementor, xpro addons — 140+ widgets for elementor +1 more Xpro Elementor Addons < 1.7.9 - Contributor+ Stored XSS via Interactive Circle Widget CVE-2026-84088 6.8 MediumSeptember 16, 2026
• unknown xpro addons — 140+ widgets for elementor, xpro addons — 140+ widgets for elementor +1 more Xpro Elementor Addons < 1.7.8 - Unauthenticated Draft/Private Product Disclosure via Quick View CVE-2026-84146 5.3 MediumSeptember 4, 2026
• xpro addons — 140+ widgets for elementor Xpro Addons <= 1.5.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Creation via get_menu_content_editor() Function CVE-2026-7105 4.3 MediumAugust 5, 2026
• xpro addons — 140+ widgets for elementor Xpro Addons <= 1.7.2 - Authenticated (Author+) Stored Cross-Site Scripting via 'custom_attributes' Parameter of Multiple Widgets CVE-2026-11614 6.4 MediumJune 24, 2026
• xpro addons — 140+ widgets for elementor Xpro Addons — 140+ Widgets for Elementor <= 1.5.0 - Missing Authorization to Unauthenticated Xpro Template Creation CVE-2025-15369 5.3 MediumMay 20, 2026
• xpro elementor addons WordPress Xpro Elementor Addons plugin <= 1.5.1 - SQL Injection vulnerability CVE-2026-45214 8.5 HighMay 12, 2026
• xpro addons — 140+ widgets for elementor Xpro Addons — 140+ Widgets for Elementor <= 1.4.20 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-13368 6.4 MediumApril 4, 2026
• xpro addons — 140+ widgets for elementor Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Box Widget CVE-2026-2949 6.4 MediumApril 4, 2026
• xpro addons for beaver builder – lite WordPress Xpro Addons For Beaver Builder – Lite plugin <= 1.5.6 - Broken Access Control vulnerability CVE-2026-32395 5.3 MediumMarch 13, 2026
• xpro addons — 140+ widgets for elementor Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Scroller Widget box link CVE-2025-14149 6.4 MediumFebruary 27, 2026
• xpro elementor addons WordPress Xpro Elementor Addons plugin <= 1.4.19.1 - Arbitrary File Upload vulnerability CVE-2025-69312 9.1 CriticalJanuary 22, 2026
• xpro elementor addons WordPress Xpro Elementor Addons plugin <= 1.4.19.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-63044 6.5 MediumDecember 9, 2025
• xpro theme builder WordPress Xpro Theme Builder Plugin <= 1.2.9 - Broken Access Control Vulnerability CVE-2025-58198 6.5 MediumAugust 27, 2025
• xpro elementor addons WordPress Xpro Elementor Addons Plugin <= 1.4.17 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58195 6.5 MediumAugust 27, 2025
• xpro addons for beaver builder – lite WordPress Xpro Addons For Beaver Builder – Lite plugin <= 1.5.5 - Cross Site Scripting (XSS) Vulnerability CVE-2025-48232 6.5 MediumMay 19, 2025
• xpro theme builder WordPress Xpro Theme Builder Plugin <= 1.2.8.4 - Broken Access Control vulnerability CVE-2025-32201 4.3 MediumApril 4, 2025
• xpro elementor addons WordPress Xpro Elementor Addons plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability CVE-2025-32163 6.5 MediumApril 4, 2025
• xpro addons — 140+ widgets for elementor 140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Site Title' widget CVE-2025-2108 6.4 MediumMarch 20, 2025
• wpxpro xpro addons for elementor, xpro addons — 140+ widgets for elementor +1 more 140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-13649 6.4 MediumMarch 8, 2025
• wpxpro xpro addons for elementor, xpro addons — 140+ widgets for elementor +1 more 140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.2 - Authenticated (Contributor+) Post Disclosure via Post Duplication CVE-2024-12584 4.3 MediumJanuary 8, 2025
• wpxpro xpro addons for elementor, xpro elementor addons +1 more WordPress Xpro Addons For Elementor plugin <= 1.4.6.5 - Cross Site Scripting (XSS) vulnerability CVE-2024-54253 6.5 MediumDecember 9, 2024
• wpxpro xpro addons for elementor, xpro addons — 140+ widgets for elementor +1 more 140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template CVE-2024-10319 4.3 MediumNovember 5, 2024
• wpxpro xpro addons for elementor, xpro addons — 140+ widgets for elementor +1 more 140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Grid Widget CVE-2024-7791 6.4 MediumAugust 27, 2024
• xpro elementor addons, wpxpro xpro addons for elementor +1 more WordPress Xpro Elementor Addons plugin <= 1.4.4.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-43150 6.5 MediumAugust 12, 2024
• xpro addons — 140+ widgets for elementor 140+ Widgets | Best Addons For Elementor – FREE <= 1.4.3.1 - Authenticated (Contributor+) PHP Object Injection CVE-2024-4471 8.0 HighMay 23, 2024
• xpro addons — 140+ widgets for elementor 140+ Widgets | Best Addons For Elementor – FREE <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets CVE-2024-4440 6.4 MediumMay 14, 2024
• xpro elementor addons, wpxpro xpro addons for elementor +1 more WordPress Xpro Elementor Addons plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-34570 5.9 MediumMay 8, 2024
• xpro addons — 140+ widgets for elementor 130+ Widgets | Best Addons For Elementor – FREE <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-2250 6.4 MediumMarch 29, 2024