Product by Wpdevteam
Essential Addons For Elementor – Popular Elementor Templates & Widgets
50 known vulnerabilities in Essential Addons For Elementor – Popular Elementor Templates & Widgets (Wpdevteam), 0 of them actively exploited (CISA KEV).
Key figures
50
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2026-7665 | Authorization Bypass Through User-Controlled Key (CVE-2026-7665) | 5.3 | |
| High | CVE-2026-15155 | Weak Password Recovery Mechanism for Forgotten Password (CVE-2026-15155) | 8.8 | |
| High | CVE-2026-118205 | Improper Privilege Management (CVE-2026-118205) | 7.4 | |
| High | CVE-2024-3018 | WPDeveloper Essential Addons for Elementor: Deserialization of Untrusted Data | 8.8 | |
| Medium | CVE-2026-15145 | Cross-site Scripting (CVE-2026-15145) | 6.4 | |
| High | CVE-2021-4447 | Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation | 8.8 | |
| High | CVE-2024-8979 | WPDeveloper Essential Addons for Elementor: Exposure of Sensitive Information to an Unauthorized Actor | 8.0 | |
| Medium | CVE-2026-15156 | Cross-site Scripting (CVE-2026-15156) | 6.4 | |
| High | CVE-2024-1536 | WPDeveloper Essential Addons for Elementor: Cross-site Scripting | 7.4 | |
| Medium | CVE-2026-6459 | Cross-site Scripting (CVE-2026-6459) | 6.4 | |
| Medium | CVE-2024-4156 | WPDeveloper Essential Addons for Elementor: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-3728 | WPDeveloper Essential Addons for Elementor: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-4448 | WPDeveloper Essential Addons for Elementor: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-5193 | Improper Privilege Management (CVE-2026-5193) | 6.5 | |
| Medium | CVE-2024-4003 | WPDeveloper Essential Addons for Elementor: Improper Input Validation | 6.4 | |
| Medium | CVE-2024-1236 | WPDeveloper Essential Addons for Elementor: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-8978 | WPDeveloper Essential Addons for Elementor: Exposure of Sensitive Information to an Unauthorized Actor | 5.7 | |
| Medium | CVE-2024-7092 | WPDeveloper Essential Addons for Elementor: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-1512 | Cross-site Scripting (CVE-2026-1512) | 6.4 | |
| Medium | CVE-2024-2623 | WPDeveloper Essential Addons for Elementor: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-4624 | WPDeveloper Essential Addons for Elementor: Cross-site Scripting | 6.4 | |
| Medium | CVE-2025-13977 | Cross-site Scripting (CVE-2025-13977) | 6.4 | |
| Medium | CVE-2024-5189 | WPDeveloper Essential Addons for Elementor: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-5647 | BlossomThemes Social Feed: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-1276 | WPDeveloper Essential Addons for Elementor: Cross-site Scripting | 6.4 |