Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons
bdthemes-element-pack-lite · eklenti
Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons için bilinen güvenlik açıkları. Sitenizde bu bileşenin hangi sürümünün çalıştığını WP Lens ile saniyede öğrenin.
39 bilinen açık
5 kayıt giriş yapmadan sömürülebilir · son kayıt 17 Eyl 2026
wordpress.org'da yayında · son sürüm 8.8.6 · son güncelleme 1 Eki 2026 · 100 bin+ kurulum
wordpress.org durumu 2 Eki 2026 tarihinde kontrol edildi
Güvenlik açıkları
- Yüksek 8.8
CVE-2024-30496giriş gerekir≤ 5.5.3
WordPress Element Pack Lite plugin <= 5.5.3 - SQL Injection vulnerability
- Yüksek 7.6
CVE-2026-40745yüksek yetki≤ 8.4.2
WordPress Element Pack Elementor Addons plugin <= 8.4.2 - SQL Injection vulnerability
- Yüksek 7.5
CVE-2024-2966kimlik doğrulamasız≤ 5.5.6
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.5.6 - Sensitive Information Exposure via element_p
- Orta 6.5
CVE-2026-66574katılımcı+≤ 8.8.3
WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability
- Orta 6.5
CVE-2026-1793katılımcı+≤ 8.3.17
Element Pack Addons for Elementor <= 8.3.17 - Authenticated (Contributor+) Arbitrary File Read
- Orta 6.5
CVE-2024-4359katılımcı+≤ 5.7.2
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Arbitrary File R
- Orta 6.4
CVE-2026-4655katılımcı+≤ 8.4.2
Element Pack Addons for Elementor <= 8.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Image Widget
- Orta 6.4
CVE-2025-1457katılımcı+≤ 5.10.28
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.28 - Authenticated (Contributor+) DOM-Based St
- Orta 6.4
CVE-2024-5555katılımcı+≤ 5.6.5
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.5 - Authenticated (Contributor+) Stored Cross-Sit
- Orta 6.4
CVE-2024-5554katılımcı+≤ 5.6.11
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Si
- Orta 5.4
CVE-2024-47392giriş gerekir≤ 5.7.5
WordPress Element Pack Elementor Addons plugin <= 5.7.5 - Cross Site Scripting (XSS) vulnerability
- Orta 5.4
CVE-2024-39667giriş gerekir≤ 5.6.11
WordPress Element Pack Elementor Addons plugin <= 5.6.11 - Cross Site Scripting (XSS) vulnerability
- Orta 5.4
CVE-2024-32572giriş gerekir≤ 5.6.0
WordPress Element Pack Elementor Addons plugin <= 5.6.0 - Cross Site Scripting (XSS) vulnerability
- Orta 5.4
CVE-2024-30185giriş gerekir≤ 5.5.3
WordPress Element Pack Elementor Addons plugin <= 5.5.3 - Cross Site Scripting (XSS) vulnerability
- Orta 5.4
CVE-2024-24840giriş gerekir≤ 5.4.11
WordPress Element Pack Elementor Addons plugin <= 5.4.11 - Broken Access Control on Duplicate Post vulnerability
- Orta 5.4
CVE-2025-13196katılımcı+≤ 8.3.4
Element Pack Addons for Elementor <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map widget
- Orta 5.4
CVE-2025-8100katılımcı+≤ 8.1.5
Element Pack Elementor Addons and Templates <= 8.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map Widget Marker Content
- Orta 5.4
CVE-2025-5944katılımcı+
Element Pack Addons for Elementor <= 8.0.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-caption Attribute
- Orta 5.4
CVE-2025-1458katılımcı+≤ 5.10.29
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.29 - Authenticated (Contributor+) Stored Cross
- Orta 5.4
CVE-2024-12851katılımcı+≤ 5.10.14
Element Pack Lite - Addons for Elementor <= 5.10.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
- Orta 5.4
CVE-2024-9058katılımcı+≤ 5.10.5
Element Pack Elementor Addons <= 5.10.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Lightbox Widget
- Orta 5.4
CVE-2024-9657katılımcı+≤ 5.10.2
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) DOM-Based Store
- Orta 5.4
CVE-2024-9868katılımcı+≤ 5.10.1
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) Stored Cross-Si
- Orta 5.4
CVE-2024-10310katılımcı+≤ 5.10.1
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) DOM-Based Store
- Orta 5.4
CVE-2024-7247katılımcı+≤ 5.7.2
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Sit
- Orta 5.4
CVE-2024-4360katılımcı+≤ 5.7.6
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.6 - Authenticated (Contributor+) Stored Cross-Sit
- Orta 5.4
CVE-2024-4643katılımcı+≤ 5.6.11
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Si
- Orta 5.4
CVE-2024-3925katılımcı+≤ 5.6.11
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Si
- Orta 5.4
CVE-2024-3926katılımcı+≤ 5.6.1
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Sit
- Orta 5.4
CVE-2024-1429katılımcı+≤ 5.6.0
Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenti
- Orta 5.4
CVE-2024-1426katılımcı+≤ 5.6.0
Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenti
- Orta 5.4
CVE-2024-1428katılımcı+≤ 5.5.3
Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.5.3 - Authenti
- Orta 5.4
CVE-2024-0837katılımcı+≤ 5.3.2
Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.3.2 - Authenti
- Orta 5.3
CVE-2026-65502kimlik doğrulamasız≤ 8.7.13
WordPress Element Pack Elementor Addons plugin <= 8.7.13 - Captcha Bypass vulnerability
- Orta 5.3
CVE-2026-0673kimlik doğrulamasız≤ 8.3.15
Element Pack Addons for Elementor <= 8.3.15 - Unauthenticated SMTP Header Injection
- Orta 5.3
CVE-2024-3927kimlik doğrulamasız≤ 5.6.3
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.3 - Form Submission Admin Email Bypass
- Orta 5.0
CVE-2025-11536abone+≤ 8.2.5
Element Pack Addons for Elementor <= 8.2.5 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
- Orta 4.3
CVE-2025-31413kimlik doğrulamasız · tıklama gerekir≤ 8.3.13
WordPress Element Pack Elementor Addons plugin <= 8.3.13 - Cross Site Request Forgery (CSRF) vulnerability
- Orta 4.3
CVE-2024-11852abone+≤ 5.10.12
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization
Yetki etiketi kaydın kendi metninden okunur (ör. “abone+”: abone ve üstü roller). Metin rol söylemiyorsa CVSS'e göre “giriş gerekir” ya da “yüksek yetki” yazılır; rol adı uydurulmaz. “Tıklama gerekir”: saldırı, oturumu açık birinin bağlantıya tıklamasına bağlı (CSRF, yansıyan XSS).