Ultimate Addons for Elementor – Widgets, Templates, WooCommerce & Header Footer Builder

Güvenlik açıkları

• CVE-2026-15787katılımcı+≤ 2.9.1

  Ultimate Addons for Elementor <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Widget data-toggle-icon/data-close-icon At

  Orta 6.4

• CVE-2024-11230katılımcı+≤ 1.6.46

  Elementor Header & Footer Builder <= 1.6.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title Widget

  Orta 5.4

• CVE-2024-10325yazar+≤ 1.6.45

  Elementor Header & Footer Builder <= 1.6.45 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

  Orta 5.4

• CVE-2024-33933katılımcı+≤ 1.6.35

  WordPress Elementor Header & Footer Builder plugin <= 1.6.35 - Contributor+ DOM-Based Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-5757katılımcı+≤ 1.6.35

  Elementor Header & Footer Builder <= 1.6.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Title Widget

  Orta 5.4

• CVE-2024-2618katılımcı+≤ 1.6.26

  Elementor Header & Footer Builder <= 1.6.26 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2024-2619yazar+≤ 1.6.26

  Elementor Header & Footer Builder <= 1.6.26 - Authenticated (Author+) HTML Injection

  Orta 5.4

• CVE-2024-4634katılımcı+≤ 1.6.28

  Elementor Header & Footer Builder <= 1.6.28 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2024-1237katılımcı+≤ 1.6.24

  Elementor Header & Footer Builder <= 1.6.24 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2025-8488abone+≤ 2.4.6

  Ultimate Addons for Elementor (Formerly Elementor Header & Footer Builder) <= 2.4.6 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Upda

  Orta 4.3

• CVE-2024-10050katılımcı+≤ 1.6.43

  Elementor Header & Footer Builder <= 1.6.43 - Authenticated (Contributor+) Information Disclosure via Shortcode

  Orta 4.3