Skip to content
Noroxi

PowerPack Addons for Elementor (Free Widgets, Extensions and Templates)

powerpack-lite-for-elementor · plugin

Known security vulnerabilities for PowerPack Addons for Elementor (Free Widgets, Extensions and Templates). Find out in seconds which version runs on your site with WP Lens.

11 known vulnerabilities

latest Mar 13, 2026

Vulnerabilities

  • CVE-2026-32430

    WordPress PowerPack Addons for Elementor plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2025-8388

    PowerPack Lite for Elementor <= 2.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Via 'cursor_url'

    Medium 6.4

  • CVE-2025-1512

    PowerPack Elementor Addons (Free Widgets, Extensions and Templates) <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 6.4

  • CVE-2024-5787

    PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Effects Wi

    Medium 5.4

  • CVE-2024-5327

    PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2024-2492

    PowerPack Addons for Elementor <= 2.7.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Tweet Widget

    Medium 5.4

  • CVE-2024-2491

    PowerPack Addons for Elementor <= 2.7.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via *_html_tag*

    Medium 5.4

  • CVE-2024-1411

    PowerPack Addons for Elementor <= 2.7.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Buttons Widget

    Medium 5.4

  • CVE-2024-1055

    PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2024-10692

    PowerPack Elementor Addons (Free Widgets, Extensions and Templates) <= 2.8.1 - Authenticated (Contributor+) Post Disclosure

    Medium 4.3

  • CVE-2023-6984

    PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.13 - Cross-Site Request Forgery

    Medium 4.3

← Back to directory