WPXpro records
8 published records for vendor wpxpro.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 25%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2024-13808No exploit | Xpro Elementor Addons - Pro <= 1.4.9 - Authenticated (Contributor+) Remote Code Executionwpxpro · xpro addons for elementor · CWE-94 | High8.8 | — | 0.7% | Apr 26, 2025 |
26Monitor | CVE-2024-12584No exploit | 140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.2 - Authenticated (Contributor+) Post Disclosure via Post Duplicationwpxpro · xpro addons for elementor · CWE-200 | Medium6.5 | — | 0.3% | Jan 8, 2025 |
21Monitor | CVE-2024-54253No exploit | WordPress Xpro Addons For Elementor plugin <= 1.4.6.5 - Cross Site Scripting (XSS) vulnerabilitywpxpro · xpro addons for elementor · CWE-79 | Medium5.4 | — | 0.3% | Dec 9, 2024 |
21Monitor | CVE-2024-7791No exploit | 140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Grid Widgetwpxpro · xpro addons for elementor · CWE-79 | Medium5.4 | — | 0.3% | Aug 27, 2024 |
21Monitor | CVE-2024-13649No exploit | 140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.7 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpxpro · xpro addons for elementor · CWE-79 | Medium5.4 | — | 0.2% | Mar 8, 2025 |
21Monitor | CVE-2024-43150No exploit | WordPress Xpro Elementor Addons plugin <= 1.4.4.2 - Cross Site Scripting (XSS) vulnerabilitywpxpro · xpro addons for elementor · CWE-79 | Medium5.4 | — | 0.2% | Aug 12, 2024 |
19Monitor | CVE-2024-34570No exploit | WordPress Xpro Elementor Addons plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerabilitywpxpro · xpro addons for elementor · CWE-79 | Medium4.8 | — | 0.2% | May 8, 2024 |
17Monitor | CVE-2024-10319No exploit | 140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templatewpxpro · xpro addons for elementor · CWE-200 | Medium4.3 | — | 0.3% | Nov 5, 2024 |
- CVE-2024-1380835Monitor
Xpro Elementor Addons - Pro <= 1.4.9 - Authenticated (Contributor+) Remote Code Execution
HighCVSS 8.8No exploitEPSS 0%wpxpro · xpro addons for elementorApr 26, 2025
- CVE-2024-1258426Monitor
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.2 - Authenticated (Contributor+) Post Disclosure via Post Duplication
MediumCVSS 6.5No exploitEPSS 0%wpxpro · xpro addons for elementorJan 8, 2025
- CVE-2024-5425321Monitor
WordPress Xpro Addons For Elementor plugin <= 1.4.6.5 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%wpxpro · xpro addons for elementorDec 9, 2024
- CVE-2024-779121Monitor
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Grid Widget
MediumCVSS 5.4No exploitEPSS 0%wpxpro · xpro addons for elementorAug 27, 2024
- CVE-2024-1364921Monitor
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%wpxpro · xpro addons for elementorMar 8, 2025
- CVE-2024-4315021Monitor
WordPress Xpro Elementor Addons plugin <= 1.4.4.2 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%wpxpro · xpro addons for elementorAug 12, 2024
- CVE-2024-3457019Monitor
WordPress Xpro Elementor Addons plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 4.8No exploitEPSS 0%wpxpro · xpro addons for elementorMay 8, 2024
- CVE-2024-1031917Monitor
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template
MediumCVSS 4.3No exploitEPSS 0%wpxpro · xpro addons for elementorNov 5, 2024