Skip to contentXpro Addons — 140+ Widgets For Elementor vulnerabilities
- unknown xpro addons — 140+ widgets for elementor, xpro addons — 140+ widgets for elementor +1 moreXpro Elementor Addons < 1.7.9 - Contributor+ Stored XSS via Interactive Circle WidgetCVE-2026-840886.8 Medium
- unknown xpro addons — 140+ widgets for elementor, xpro addons — 140+ widgets for elementor +1 moreXpro Elementor Addons < 1.7.8 - Unauthenticated Draft/Private Product Disclosure via Quick ViewCVE-2026-841465.3 Medium
- xpro addons — 140+ widgets for elementorXpro Addons <= 1.5.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Creation via get_menu_content_editor() FunctionCVE-2026-71054.3 Medium
- xpro addons — 140+ widgets for elementorXpro Addons <= 1.7.2 - Authenticated (Author+) Stored Cross-Site Scripting via 'custom_attributes' Parameter of Multiple WidgetsCVE-2026-116146.4 Medium
- xpro addons — 140+ widgets for elementorXpro Addons — 140+ Widgets for Elementor <= 1.5.0 - Missing Authorization to Unauthenticated Xpro Template CreationCVE-2025-153695.3 Medium
- xpro addons — 140+ widgets for elementorXpro Addons — 140+ Widgets for Elementor <= 1.4.20 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-133686.4 Medium
- xpro addons — 140+ widgets for elementorXpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Box WidgetCVE-2026-29496.4 Medium
- xpro addons — 140+ widgets for elementorXpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Scroller Widget box linkCVE-2025-141496.4 Medium
- xpro addons — 140+ widgets for elementor140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Site Title' widgetCVE-2025-21086.4 Medium
- wpxpro xpro addons for elementor, xpro addons — 140+ widgets for elementor +1 more140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.7 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-136496.4 Medium
- wpxpro xpro addons for elementor, xpro addons — 140+ widgets for elementor +1 more140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.2 - Authenticated (Contributor+) Post Disclosure via Post DuplicationCVE-2024-125844.3 Medium
- wpxpro xpro addons for elementor, xpro addons — 140+ widgets for elementor +1 more140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor TemplateCVE-2024-103194.3 Medium
- wpxpro xpro addons for elementor, xpro addons — 140+ widgets for elementor +1 more140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Grid WidgetCVE-2024-77916.4 Medium
- xpro addons — 140+ widgets for elementor140+ Widgets | Best Addons For Elementor – FREE <= 1.4.3.1 - Authenticated (Contributor+) PHP Object InjectionCVE-2024-44718.0 High
- xpro addons — 140+ widgets for elementor140+ Widgets | Best Addons For Elementor – FREE <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple WidgetsCVE-2024-44406.4 Medium
- xpro addons — 140+ widgets for elementor130+ Widgets | Best Addons For Elementor – FREE <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-22506.4 Medium