Product by WPDeveloper

    Essential Addons for Elementor

    60 known vulnerabilities in Essential Addons for Elementor (WPDeveloper), 0 of them actively exploited (CISA KEV).

    Key figures

    60

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Essential Addons for Elementor (WPDeveloper)
    CriticalCVE-2023-32243

    WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation

    		9.8
    CriticalCVE-2022-0320

    Essential Addons for Elementor < 5.0.5 - Unauthenticated LFI

    		9.8
    MediumCVE-2022-0683

    Essential Addons for Elementor Lite <= 5.0.8 Reflected Cross-Site Scripting

    		6.1
    HighCVE-2025-24752

    WPDeveloper Essential Addons for Elementor: Cross-site Scripting

    		7.1
    HighCVE-2023-41955

    WPDeveloper Essential Addons for Elementor: Improper Privilege Management

    		8.8
    HighCVE-2024-3018

    WPDeveloper Essential Addons for Elementor: Deserialization of Untrusted Data

    also in 1 other product

    		8.8
    HighCVE-2021-4447

    Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation

    also in 1 other product

    		8.8
    MediumCVE-2026-110898

    WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability

    		6.4
    HighCVE-2024-8979

    WPDeveloper Essential Addons for Elementor: Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		8.0
    MediumCVE-2026-102394

    WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-81777

    WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability

    		5.3
    HighCVE-2024-1536

    WPDeveloper Essential Addons for Elementor: Cross-site Scripting

    also in 1 other product

    		7.4
    MediumCVE-2024-4156

    WPDeveloper Essential Addons for Elementor: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-3728

    WPDeveloper Essential Addons for Elementor: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-4448

    WPDeveloper Essential Addons for Elementor: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-4003

    WPDeveloper Essential Addons for Elementor: Improper Input Validation

    also in 1 other product

    		6.4
    MediumCVE-2024-1236

    WPDeveloper Essential Addons for Elementor: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-8978

    WPDeveloper Essential Addons for Elementor: Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		5.7
    MediumCVE-2024-7092

    WPDeveloper Essential Addons for Elementor: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-2623

    WPDeveloper Essential Addons for Elementor: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-4624

    WPDeveloper Essential Addons for Elementor: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-5189

    WPDeveloper Essential Addons for Elementor: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-1276

    WPDeveloper Essential Addons for Elementor: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2023-3779

    Essential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure

    also in 1 other product

    		5.3
    MediumCVE-2024-1537

    WPDeveloper Essential Addons for Elementor: Cross-site Scripting

    also in 1 other product

    		6.4

    All vulnerabilities in search

    All products by WPDeveloper