The Plus Addons for Elementor – Mega Menu, Header Footer, Post Grid, AI Widgets & Templates

Güvenlik açıkları

• CVE-2024-43932giriş gerekir≤ 5.6.2

  WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Broken Access Control vulnerability

  Yüksek 8.8

• CVE-2024-2203katılımcı+≤ 5.4.1

  The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Clients Widget

  Yüksek 8.8

• CVE-2021-4331katılımcı+≤ 4.1.9

  The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Privilege Escalation

  Yüksek 8.8

• CVE-2024-23511giriş gerekir≤ 5.3.3

  WordPress The Plus Addons for Elementor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2025-55712giriş gerekir≤ 6.3.13

  WordPress The Plus Addons for Elementor Page Builder Lite Plugin <= 6.3.13 - Broken Access Control Vulnerability

  Orta 6.5

• CVE-2025-49076giriş gerekir≤ 6.2.7

  WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.2.7 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2026-96829katılımcı+≤ 6.5.1

  WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2021-4332katılımcı+≤ 4.1.9

  The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read

  Orta 6.5

• CVE-2026-15285katılımcı+≤ 6.4.11

  The Plus Addons for Elementor <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom Attributes

  Orta 6.4

• CVE-2026-9243katılımcı+≤ 6.4.15

  The Plus Addons for Elementor <= 6.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'carousel_direction' Parameter

  Orta 6.4

• CVE-2026-5243katılımcı+≤ 6.4.11

  The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site

  Orta 6.4

• CVE-2026-3311katılımcı+≤ 6.4.9

  The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.9 - Authenticated (Contributor+) Stored Cross-Site

  Orta 6.4

• CVE-2025-7646katılımcı+≤ 6.3.10

  The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.3.10 - Authenticated (Contributor+) Stored Cross-Site Scr

  Orta 6.4

• CVE-2024-2210katılımcı+≤ 5.4.1

  The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Team Member Listing

  Orta 6.4

• CVE-2024-53823giriş gerekir≤ 5.6.14

  WordPress The Plus Addons for Elementor plugin <= 5.6.14 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-35709giriş gerekir≤ 5.5.4

  WordPress The Plus Addons for Elementor plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-34373giriş gerekir≤ 5.4.2

  WordPress The Plus Addons for Elementor plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2025-1287katılımcı+≤ 6.2.2

  The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.2.2 - Authenticated (Contributor+) Stored Cross-Site Scri

  Orta 5.4

• CVE-2024-11829katılımcı+≤ 6.1.8

  The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.1.8 - Authenticated (Contributor+) Stored Cross-Site Scri

  Orta 5.4

• CVE-2024-5583katılımcı+≤ 5.6.2

  The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scri

  Orta 5.4

• CVE-2024-6575katılımcı+≤ 5.6.2

  The Plus Addons for Elementor <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TP Page Scroll Widget

  Orta 5.4

• CVE-2024-5763katılımcı+≤ 5.6.2

  The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scri

  Orta 5.4

• CVE-2024-4482katılımcı+≤ 5.6.1

  The Plus Addons for Elementor <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

  Orta 5.4

• CVE-2024-4983katılımcı+≤ 5.6.0

  The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.0- Authenticated (Contributor+) Stored Cross-Site Scrip

  Orta 5.4

• CVE-2024-4485katılımcı+≤ 5.5.2

  The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scri

  Orta 5.4

• CVE-2024-4484katılımcı+≤ 5.5.1

  The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scri

  Orta 5.4

• CVE-2024-3718katılımcı+≤ 5.5.4

  The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar, Header Meta Content, Scroll Navigation, Pric

  Orta 5.4

• CVE-2024-2785katılımcı+≤ 5.4.2

  The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate

  Orta 5.4

• CVE-2024-0445katılımcı+≤ 5.4.2

  The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2024-3199katılımcı+≤ 5.4.2

  The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

  Orta 5.4

• CVE-2024-3197katılımcı+≤ 5.4.2

  The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes

  Orta 5.4

• CVE-2024-1419katılımcı+≤ 5.4.0

  The Plus Addons for Elementor <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Header Meta Content Widget

  Orta 5.4

• CVE-2024-43977yüksek yetki≤ 5.6.2

  WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2026-2385kimlik doğrulamasız≤ 6.4.7

  The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Unauthenticated Email Relay

  Orta 5.3

• CVE-2026-2386yazar+≤ 6.4.7

  The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Incorrect Authorization to Authenticated (Autho

  Orta 4.3

• CVE-2024-10365katılımcı+≤ 6.0.3

  The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information

  Orta 4.3

• CVE-2024-8913katılımcı+≤ 5.6.11

  The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.11 - Authenticated (Contributor+) Sensitive Information

  Orta 4.3