Essential Addons for Elementor – Popular Elementor Templates & Widgets

Güvenlik açıkları

• CVE-2023-32243kimlik doğrulamasız≤ 5.7.1

  WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation

  Kritik 9.8

• CVE-2026-15155katılımcı+≤ 6.6.10

  Essential Addons for Elementor <= 6.6.10 - Authenticated (Contributor+) Account Takeover via Email Header Injection

  Yüksek 8.8

• CVE-2021-4447katılımcı+≤ 4.6.4

  Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation

  Yüksek 8.8

• CVE-2023-41955katılımcı+≤ 5.8.8

  WordPress Essential Addons for Elementor plugin <= 5.8.8 - Contributor+ Privilege Escalation vulnerability

  Yüksek 8.8

• CVE-2024-3018yazar+≤ 5.9.13

  Essential Addons for Elementor <= 5.9.13 - Authenticated (Author+) PHP Object Injection via error_resetpassword

  Yüksek 8.8

• CVE-2024-1536katılımcı+≤ 5.9.9

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Script

  Yüksek 7.4

• CVE-2026-102394giriş gerekir≤ 6.8.4

  WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2025-69092giriş gerekir≤ 6.5.3

  WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2025-39590giriş gerekir≤ 6.1.9

  WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) Vulnerability

  Orta 6.5

• CVE-2026-5193yazar+≤ 6.5.13

  Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_user

  Orta 6.5

• CVE-2026-15145katılımcı+≤ 6.6.11

  Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget

  Orta 6.4

• CVE-2026-15156katılımcı+≤ 6.6.11

  Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reading Progress Global Color Settings

  Orta 6.4

• CVE-2026-6459yazar+≤ 6.6.2

  Essential Addons for Elementor <= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget Popup

  Orta 6.4

• CVE-2026-1512katılımcı+≤ 6.5.9

  Essential Addons for Elementor <= 6.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Box Widget

  Orta 6.4

• CVE-2025-13977katılımcı+≤ 6.5.3

  Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 6.4

• CVE-2025-8451katılımcı+≤ 6.2.2

  Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data

  Orta 6.4

• CVE-2024-4448katılımcı+≤ 5.9.19

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scrip

  Orta 6.4

• CVE-2024-3728katılımcı+≤ 5.9.15

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scrip

  Orta 6.4

• CVE-2024-3333katılımcı+≤ 5.9.14

  Essential Addons for Elementor <= 5.9.14 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget URL Attribute

  Orta 6.4

• CVE-2024-2650katılımcı+≤ 5.9.11

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scrip

  Orta 6.4

• CVE-2024-2623katılımcı+≤ 5.9.11

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scrip

  Orta 6.4

• CVE-2024-1537katılımcı+≤ 5.9.9

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Script

  Orta 6.4

• CVE-2024-1276katılımcı+≤ 5.9.8

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Script

  Orta 6.4

• CVE-2024-1236katılımcı+≤ 5.9.8

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Script

  Orta 6.4

• CVE-2024-0586katılımcı+≤ 5.9.4

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scritp

  Orta 6.4

• CVE-2025-24752kimlik doğrulamasız · tıklama gerekir≤ 6.0.14

  WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2022-0683kimlik doğrulamasız · tıklama gerekir≤ 5.0.8

  Essential Addons for Elementor Lite <= 5.0.8 Reflected Cross-Site Scripting

  Orta 6.1

• CVE-2024-8979yazar+≤ 6.0.9

  Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information

  Orta 5.7

• CVE-2024-8978katılımcı+≤ 6.0.9

  Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Informa

  Orta 5.7

• CVE-2024-56063giriş gerekir≤ 6.0.7

  WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-39649giriş gerekir≤ 5.9.26

  WordPress Essential Addons for Elementor plugin <= 5.9.26 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-9994katılımcı+≤ 6.1.12

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Script

  Orta 5.4

• CVE-2024-9993katılımcı+≤ 6.1.12

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Script

  Orta 5.4

• CVE-2024-8961katılımcı+≤ 6.0.7

  Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site

  Orta 5.4

• CVE-2024-8742katılımcı+≤ 6.0.3

  Essential Addons for Elementor <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery Widget

  Orta 5.4

• CVE-2024-8440katılımcı+≤ 6.0.3

  Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scrip

  Orta 5.4

• CVE-2024-7092katılımcı+≤ 5.9.27

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.27 - Authenticated (Contributor+) Stored Cross-Site Scrip

  Orta 5.4

• CVE-2024-5189katılımcı+≤ 5.9.23

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.23 - Authenticated (Contributor+) Stored Cross-Site Scrip

  Orta 5.4

• CVE-2024-5188katılımcı+≤ 5.9.22

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.22 - Authenticated (Contributor+) Stored Cross-Site Scrip

  Orta 5.4

• CVE-2024-5073katılımcı+≤ 5.9.21

  Essential Addons for Elementor <= 5.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Feed

  Orta 5.4

• CVE-2024-4624katılımcı+≤ 5.9.20

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.20 - Authenticated (Contributor+) Stored Cross-Site Scrip

  Orta 5.4

• CVE-2024-4449katılımcı+≤ 5.9.19

  Essential Addons for Elementor <= 5.9.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Several Widgets

  Orta 5.4

• CVE-2024-4275katılımcı+≤ 5.9.19

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scrip

  Orta 5.4

• CVE-2024-4156katılımcı+≤ 5.9.17

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.17 - Authenticated (Contributor+) Stored Cross-Site Scrip

  Orta 5.4

• CVE-2024-4003katılımcı+≤ 5.9.15

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scrip

  Orta 5.4

• CVE-2024-1172katılımcı+≤ 5.9.8

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Script

  Orta 5.4

• CVE-2024-1171katılımcı+≤ 5.9.8

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Script

  Orta 5.4

• CVE-2024-0954katılımcı+≤ 5.9.7

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Script

  Orta 5.4

• CVE-2024-0585katılımcı+≤ 5.9.4

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Script

  Orta 5.4

• CVE-2023-7044katılımcı+≤ 5.9.2

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site Script

  Orta 5.4

• CVE-2026-81777kimlik doğrulamasız≤ 6.8.0

  WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability

  Orta 5.3

• CVE-2026-25440kimlik doğrulamasız→ 6.6.0

  WordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2026-7665kimlik doğrulamasız≤ 6.6.4

  Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler

  Orta 5.3

• CVE-2026-23543kimlik doğrulamasız≤ 6.5.5

  WordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2026-1004kimlik doğrulamasız≤ 6.5.5

  Essential Addons for Elementor <= 6.5.5 - Missing Authorization to Unauthenticated Sensitive Information Exposure

  Orta 5.3

• CVE-2024-3733kimlik doğrulamasız≤ 5.9.15

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Information Exposure

  Orta 5.3

• CVE-2024-2974kimlik doğrulamasız≤ 5.9.13

  Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.13 - Unauthenticated Sensitive Information Exposure

  Orta 5.3

• CVE-2023-3779kimlik doğrulamasız≤ 5.8.1

  Essential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure

  Orta 5.3

• CVE-2025-39589giriş gerekir≤ 6.1.9

  WordPress Essential Addons for Elementor plugin <= 6.1.9 - Sensitive Data Exposure Vulnerability

  Orta 4.3

• CVE-2021-4446abone+≤ 4.6.4

  Essential Addons for Elementor <= 4.6.4 - Missing Authorization

  Orta 4.3

• CVE-2025-64352yüksek yetki≤ 6.2.4

  WordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerability

  Düşük 2.7