Security
فارسی
All products

essential-addons-for-elementor-lite

WordPress · Plugin
76 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Essential Addons for Elementor 6.7.3 - 6.8.6 - Unauthenticated Registration Approval BypassCVE-2026-110508 essential-addons-for-elementor-lite WordPress High Fix reported
Essential Addons for Elementor 6.6.0 - 6.8.7 - Authenticated (Author+) Privilege EscalationCVE-2026-110808 essential-addons-for-elementor-lite WordPress Medium Fix reported
Essential Addons for Elementor <= 6.8.7 - Unauthenticated Privilege Escalation to 'page_id' Parameter via Elementor RevisionCVE-2026-118205 essential-addons-for-elementor-lite WordPress High Fix reported
Essential Addons for Elementor – Popular Elementor Templates & Widgets < 6.8.7 - Unauthenticated Information ExposureCVE-2026-110509 essential-addons-for-elementor-lite WordPress Medium Fix reported
Essential Addons for Elementor – Popular Elementor Templates & Widgets < 6.8.7 - Missing AuthorizationCVE-2026-110537 essential-addons-for-elementor-lite WordPress Low Fix reported
Essential Addons for Elementor – Popular Elementor Templates & Widgets < 6.8.7 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2026-110510 essential-addons-for-elementor-lite WordPress Medium Fix reported
Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.8.5 - Authenticated (Author+) Privilege EscalationCVE-2026-110898 essential-addons-for-elementor-lite WordPress Medium Fix reported
Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.8.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-102394 essential-addons-for-elementor-lite WordPress Medium Fix reported
Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.8.0 - Unauthenticated Captcha BypassCVE-2026-81777 essential-addons-for-elementor-lite WordPress Medium Fix reported
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript LibraryCVE-2024-5647 addons-for-diviblossomthemes-instagram-feed WordPress Medium Fix reported
Essential Addons for Elementor <= 6.7.1 - Unauthenticated Privilege EscalationCVE-2026-18039 essential-addons-for-elementor-lite WordPress High Fix reported
Essential Addons for Elementor – Popular Elementor Templates & Widgets < 6.6.10 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-13344 essential-addons-for-elementor-lite WordPress Medium Fix reported
Essential Addons for Elementor – Popular Elementor Templates & Widgets < 6.6.10 - Missing AuthorizationCVE-2026-13345 essential-addons-for-elementor-lite WordPress Medium Fix reported
Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text WidgetCVE-2026-15145 essential-addons-for-elementor-lite WordPress Medium Fix reported
Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reading Progress Global Color SettingsCVE-2026-15156 essential-addons-for-elementor-lite WordPress Medium Fix reported
Essential Addons for Elementor <= 6.6.10 - Authenticated (Contributor+) Account Takeover via Email Header InjectionCVE-2026-15155 essential-addons-for-elementor-lite WordPress High Fix reported
Essential Addons for Elementor <= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget PopupCVE-2026-6459 essential-addons-for-elementor-lite WordPress Medium Fix reported
Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX HandlerCVE-2026-7665 essential-addons-for-elementor-lite WordPress Medium Fix reported
Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_userCVE-2026-5193 essential-addons-for-elementor-lite WordPress Medium Fix reported
Essential Addons for Elementor <= 6.5.5 - Missing AuthorizationCVE-2026-23543 essential-addons-for-elementor-lite WordPress Medium Fix reported