Skip to content
Noroxi

Premium Addons for Elementor – Powerful Elementor Templates & Widgets

premium-addons-for-elementor · plugin

Known security vulnerabilities for Premium Addons for Elementor – Powerful Elementor Templates & Widgets. Find out in seconds which version runs on your site with WP Lens.

39 known vulnerabilities

1 with public exploit code · latest Sep 30, 2026

Vulnerabilities

  • CVE-2024-56225

    WordPress Premium Addons for Elementor plugin <= 4.10.56 - Broken Access Control vulnerability

    High 8.8

  • CVE-2026-62078

    WordPress Premium Addons for Elementor plugin <= 4.11.105 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2026-94168

    WordPress Premium Addons for Elementor plugin <= 4.11.105 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2024-31278

    WordPress Premium Addons for Elementor plugin <= 4.10.22 - Sensitive Data Exposure vulnerability

    Medium 6.5

  • CVE-2024-3647

    Premium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'arrow_style'

    Medium 6.4

  • CVE-2024-2665

    Premium Addons for Elementor <= 4.10.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button

    Medium 6.4

  • CVE-2024-2664

    Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 6.4

  • CVE-2024-0326

    Premium Addons for Elementor <= 4.10.17 - Authenticated(Contributor+) Stored Cross-Site Scripting via Link Wrapper

    Medium 6.4

  • CVE-2024-1242

    Premium Addons for Elementor <= 4.10.18 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 6.4

  • CVE-2026-4790

    Premium Addons for Elementor <= 4.11.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_svg' Parameter

    Medium 5.4

  • CVE-2025-69300

    WordPress Premium Addons for Elementor plugin <= 4.11.63 - Settings Change vulnerability

    Medium 5.4

  • CVE-2024-11937

    Premium Addons for Elementor <= 4.10.69 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2025-4774

    Premium Addons for Elementor <= 4.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

    Medium 5.4

  • CVE-2024-10266

    Premium Addons for Elementor <= 4.10.60 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Box Widget

    Medium 5.4

  • CVE-2024-8681

    Premium Addons for Elementor <= 4.10.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Media Grid Widget

    Medium 5.4

  • CVE-2024-37922

    WordPress Premium Addons for Elementor plugin <= 4.10.34 - Cross Site Scripting (XSS) vulnerability

    Medium 5.4

  • CVE-2024-6495

    Premium Addons for Elementor <= 4.10.36 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Animated Text Widget

    Medium 5.4

  • CVE-2024-6340

    Premium Addons for Elementor <= 4.10.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

    Medium 5.4

  • CVE-2024-5553

    Premium Addons for Elementor <= 4.10.33 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2024-4379

    Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Global Tooltip

    Medium 5.4

  • CVE-2024-4376

    Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget

    Medium 5.4

  • CVE-2024-4378

    Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Menu and Shape Divider

    Medium 5.4

  • CVE-2024-4203

    Premium Addons for Elementor <= 4.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2024-3885

    Premium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2024-32791

    WordPress Premium Addons for Elementor plugin <= 4.10.25 - Cross Site Scripting (XSS) vulnerability

    Medium 5.4

  • CVE-2024-2666

    Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2024-0376

    Premium Addons for Elementor <= 4.10.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link Widget

    Medium 5.4

  • CVE-2024-29106

    WordPress Premium Addons for Elementor plugin <= 4.10.16 - Cross Site Scripting (XSS) vulnerability

    Medium 5.4

  • CVE-2024-2399

    Premium Addons for Elementor <= 4.10.23 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2024-1680

    Premium Addons for Elementor <= 4.10.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Banner, Team Members, and Image Scroll Widgets

    Medium 5.4

  • CVE-2024-24831

    WordPress Premium Addons for Elementor plugin <= 4.10.16 - Cross Site Scripting (XSS) vulnerability

    Medium 5.4

  • CVE-2025-68494

    WordPress Premium Addons for Elementor plugin <= 4.11.53 - Sensitive Data Exposure vulnerability

    Medium 5.3

  • CVE-2025-14155

    Premium Addons for Elementor <= 4.11.53 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'get_template_content'

    Medium 5.3

  • CVE-2026-12141

    Premium Addons for Elementor <= 4.11.84 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'premium_tooltip_text' Parameter

    Medium 4.9

  • CVE-2025-14163

    Premium Addons for Elementor <= 4.11.53 - Cross-Site Request Forgery via 'insert_inner_template'

    Medium 4.3

  • CVE-2021-4445

    Premium Addons for Elementor <= 4.5.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update

    Medium 4.3

  • CVE-2024-6824

    Premium Addons for Elementor <= 4.10.38 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion and Arbitrary Title Update

    Medium 4.3

  • CVE-2024-6434

    Premium Addons for Elementor <= 4.10.35 - Regular Expressions Denial of Service

    Medium 4.3

  • CVE-2024-4205

    Premium Addons for Elementor <= 4.10.31 - Missing Authorization to Information Disclosure

    Medium 4.3

← Back to directory