Product by Brainstorm Force
Ultimate Addons For Elementor
13 known vulnerabilities in Ultimate Addons For Elementor (Brainstorm Force), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2020-13125 | Ultimate Addons for Elementor: security vulnerability | 7.2 | |
| High | CVE-2024-37455 | WordPress Ultimate Addons for elementor plugin <= 1.36.31 - Privilege Escalation vulnerability | 8.8 | |
| Medium | CVE-2026-15787 | BrainStormForce Ultimate Addons for Elementor: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-1237 | BrainStormForce Ultimate Addons for Elementor: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-5757 | BrainStormForce Ultimate Addons for Elementor: Cross-site Scripting | 6.4 | |
| Medium | CVE-2021-24271 | Ultimate Addons for Elementor < 1.30.0 - Contributor+ Stored XSS | 5.4 | |
| Medium | CVE-2024-4634 | BrainStormForce Ultimate Addons for Elementor: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-11230 | BrainStormForce Ultimate Addons for Elementor: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-10325 | BrainStormForce Ultimate Addons for Elementor: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-2618 | BrainStormForce Ultimate Addons for Elementor: Improper Neutralization of Alternate XSS Syntax | 6.4 | |
| Medium | CVE-2024-10050 | BrainStormForce Ultimate Addons for Elementor: Exposure of Sensitive Information to an Unauthorized Actor | 4.3 | |
| Medium | CVE-2024-2619 | Elementor Header & Footer Builder <= 1.6.26 - Authenticated (Author+) HTML Injection | 5.0 | |
| Medium | CVE-2025-8488 | BrainStormForce Ultimate Addons for Elementor: Missing Authorization | 4.3 |