Plugin icon

Addon Elements for Elementor (formerly Elementor Addon Elements)

addon-elements-for-elementor-page-builder

Vulnerabilities:

30

Last Updated:

March 23, 2026

Active Installs:

90000

Published
Title
Fixed in
CVSS
Published
2025-12-13
Title
Addon Elements for Elementor < 1.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.14.4
CVSS
6.4 (medium)
Published
2025-01-14
Title
Elementor Addon Elements < 1.14 - Contributor+ Sensitive Information Disclosure
Fixed in
Fixed in 1.14
CVSS
2.7 (low)
Published
2024-10-11
Title
Elementor Addon Elements < 1.13.9 - Authenticated (Contributor+) Sensitive Information Exposure via table_saved_sections
Fixed in
Fixed in 1.13.9
CVSS
4.3 (medium)
Published
2024-09-30
Title
Elementor Addon Elements < 1.13.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.13.7
CVSS
6.4 (medium)
Published
2024-09-30
Title
Elementor Addon Elements < 1.13.7 - Missing Authorization
Fixed in
Fixed in 1.13.7
CVSS
4.3 (medium)
Published
2024-08-29
Title
Elementor Addon Elements < 1.13.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Fixed in
Fixed in 1.13.7
CVSS
6.4 (medium)
Published
2024-08-29
Title
Elementor Addon Elements < 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and eae_slider_animation Parameters
Fixed in
Fixed in 1.13.6
CVSS
6.4 (medium)
Published
2024-06-26
Title
Elementor Addon Elements < 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.13.6
CVSS
6.4 (medium)
Published
2024-06-26
Title
Elementor Addon Elements < 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.13.6
CVSS
6.4 (medium)
Published
2024-06-11
Title
Elementor Addon Elements < 1.13.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widget
Fixed in
Fixed in 1.13.4
CVSS
5.4 (medium)
Published
2024-04-29
Title
Elementor Addon Elements < 1.13.4 - Contributor+ Stored XSS
Fixed in
Fixed in 1.13.4
CVSS
6.4 (medium)
Published
2024-03-28
Title
Elementor Addon Elements < 1.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.13.2
CVSS
6.4 (medium)
Published
2024-03-27
Title
Elementor Addon Elements < 1.13.3 - Contributor+ DOM-Based Stored XSS
Fixed in
Fixed in 1.13.3
CVSS
5.9 (medium)
Published
2024-03-27
Title
Elementor Addon Elements < 1.13.2 - Contributor+ Stored XSS
Fixed in
Fixed in 1.13.2
CVSS
5.9 (medium)
Published
2024-03-15
Title
Elementor Addon Elements < 1.12.11 - Contributor+ Stored XSS
Fixed in
Fixed in 1.12.11
CVSS
6.4 (medium)
Published
2024-02-21
Title
Elementor Addon Elements < 1.13 - Authenticated(Contributor+) Stored Cross-Site Scripting via Modal Popup effet
Fixed in
Fixed in 1.13
CVSS
6.4 (medium)
Published
2024-02-21
Title
Elementor Addon Elements < 1.13 - Contributor+ Stored XSS
Fixed in
Fixed in 1.13
CVSS
5.9 (medium)
Published
2024-02-21
Title
Elementor Addon Elements < 1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Switcher Widget
Fixed in
Fixed in 1.13
CVSS
6.4 (medium)
Published
2024-02-21
Title
Elementor Addon Elements < 1.13 - Contributor+ to LFI
Fixed in
Fixed in 1.13
CVSS
7.2 (high)
Published
2024-02-21
Title
Elementor Addon Elements < 1.13 - Contributor+ Stored XSS
Fixed in
Fixed in 1.13
CVSS
5.9 (medium)
Published
2024-02-05
Title
Elementor Addon Elements < 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.12.12
CVSS
5.5 (medium)
Published
2023-11-15
Title
Elementor Addon Elements < 1.12.8 - Unauthenticated Post ID/Tile Disclosure
Fixed in
Fixed in 1.12.8
CVSS
5.3 (medium)
Published
2023-11-15
Title
Elementor Addon Elements < 1.12.8 - Elementor Addon Element Enabling/Disabling via CSRF
Fixed in
Fixed in 1.12.8
CVSS
4.3 (medium)
Published
2023-11-15
Title
Elementor Addon Elements < 1.12.8 - Admin+ Stored XSS
Fixed in
Fixed in 1.12.8
CVSS
3.4 (low)
Published
2023-11-15
Title
Elementor Addon Elements < 1.12.8 - Settings Update via CSRF
Fixed in
Fixed in 1.12.8
CVSS
4.3 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.12
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 1.11.14
CVSS
4.3 (medium)
Published
2021-07-20
Title
Elementor Addon Elements < 1.11.8 - CSRF Bypass
Fixed in
Fixed in 1.11.8
CVSS
3.5 (low)
Published
2021-04-13
Title
Elementor Addon Elements < 1.11.2 - Contributor+ Stored XSS
Fixed in
Fixed in 1.11.2
CVSS
6.8 (medium)
Published
2020-09-09
Title
Elementor Addon Elements < 1.6.4 - CSRF & XSS
Fixed in
Fixed in 1.6.4
CVSS
3.5 (low)