Plugin icon

Essential Addons for Elementor – Popular Elementor Templates & Widgets

essential-addons-for-elementor-lite

Vulnerabilities:

53

Last Updated:

January 26, 2026

Active Installs:

2000000

Published
Title
Fixed in
CVSS
Published
2026-01-15
Title
Essential Addons for Elementor < 6.5.6 - Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 6.5.6
CVSS
5.3 (medium)
Published
2026-01-06
Title
Essential Addons for Elementor < 6.5.4 - Contributor+ Stored XSS
Fixed in
Fixed in 6.5.4
CVSS
5.9 (medium)
Published
2025-12-16
Title
Essential Addons for Elementor < 6.5.4 - Contributor+ Stored XSS
Fixed in
Fixed in 6.5.4
CVSS
5.9 (medium)
Published
2025-09-17
Title
Essential Addons for Elementor < 6.3.0 - Missing Authorization
Fixed in
Fixed in 6.3.0
CVSS
2.7 (low)
Published
2025-08-14
Title
Essential Addons for Elementor < 6.2.3 - Contributor+ DOM-Based Stored XSS
Fixed in
Fixed in 6.2.3
CVSS
5.9 (medium)
Published
2025-07-07
Title
Essential Addons for Elementor – Popular Elementor Templates and Widgets < 6.1.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Calendar` And `Business Reviews` Widgets
Fixed in
Fixed in 6.1.20
CVSS
6.4 (medium)
Published
2025-07-02
Title
Magnific Popups JavaScript Library < 1.2.0 - Contributor+ Stored XSS
Fixed in
Fixed in 6.0.5
CVSS
5.9 (medium)
Published
2025-06-06
Title
Essential Addons for Elementor < 6.1.13 - Contributor+ Stored XSS via Pricing Table Widget
Fixed in
Fixed in 6.1.13
CVSS
5.9 (medium)
Published
2025-06-06
Title
Essential Addons for Elementor < 6.1.13 - Contributor+ Stored XSS via Event Calendar Widget
Fixed in
Fixed in 6.1.13
CVSS
5.9 (medium)
Published
2025-04-16
Title
Essential Addons for Elementor < 6.1.10 - Contributor+ Stored XSS
Fixed in
Fixed in 6.1.10
CVSS
5.9 (medium)
Published
2025-04-16
Title
Essential Addons for Elementor < 6.1.10 - Contributor+ Information Disclosure
Fixed in
Fixed in 6.1.10
CVSS
2.7 (low)
Published
2025-02-04
Title
Essential Addons for Elementor < 6.0.15 - Reflected Cross-Site Scripting
Fixed in
Fixed in 6.0.15
CVSS
7.1 (high)
Published
2024-12-18
Title
Essential Addons for Elementor < 6.0.8 - Contributor+ Stored XSS
Fixed in
Fixed in 6.0.8
CVSS
5.9 (medium)
Published
2024-11-14
Title
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders < 6.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 6.0.8
CVSS
6.4 (medium)
Published
2024-11-14
Title
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders < 6.0.10 - Authenticated (Contributor+) Sensitive Information Exposure
Fixed in
Fixed in 6.0.10
CVSS
5.7 (medium)
Published
2024-11-14
Title
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders < 6.0.10 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation
Fixed in
Fixed in 6.0.10
CVSS
8 (high)
Published
2024-09-12
Title
Essential Addons for Elementor < 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery Widget
Fixed in
Fixed in 6.0.4
CVSS
6.4 (medium)
Published
2024-09-10
Title
Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders < 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget
Fixed in
Fixed in 6.0.4
CVSS
6.4 (medium)
Published
2024-08-12
Title
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders < 6.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via no_more_items_text Parameter
Fixed in
Fixed in 6.0.0
CVSS
6.4 (medium)
Published
2024-08-01
Title
Essential Addons for Elementor < 5.9.27 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 5.9.27
CVSS
6.4 (medium)
Published
2024-06-10
Title
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders < 5.9.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 5.9.24
CVSS
6.4 (medium)
Published
2024-06-05
Title
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders < 5.9.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 5.9.23
CVSS
6.4 (medium)
Published
2024-05-29
Title
Essential Addons for Elementor < 5.9.22 - Contributor+ Stored Cross-Site Scripting via Twitter Feed
Fixed in
Fixed in 5.9.22
CVSS
6.4 (medium)
Published
2024-05-17
Title
Essential Addons for Elementor < 5.9.16 - Contributor+ Stored XSS
Fixed in
Fixed in 5.9.16
CVSS
5.9 (medium)
Published
2024-05-13
Title
Essential Addons for Elementor < 5.9.21 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 5.9.21
CVSS
6.4 (medium)
Published
2024-05-09
Title
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders < 5.9.20 - Contributor+ Stored Cross-Site Scripting via 'Interactive Circles'
Fixed in
Fixed in 5.9.20
CVSS
6.4 (medium)
Published
2024-05-09
Title
Essential Addons for Elementor < 5.9.20 - Contributor+ DOM-Based Stored Cross-Site Scripting via Several Widgets
Fixed in
Fixed in 5.9.20
CVSS
6.4 (medium)
Published
2024-05-09
Title
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders < 5.9.20 - Contributor+ Stored Cross-Site Scripting via 'Dual Color Header', 'Event Calendar', & 'Advanced Data Table'
Fixed in
Fixed in 5.9.20
CVSS
6.5 (medium)
Published
2024-04-30
Title
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders < 5.9.18 - Contributor+ Stored XSS
Fixed in
Fixed in 5.9.18
CVSS
6.4 (medium)
Published
2024-04-24
Title
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders < 5.9.16 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 5.9.16
CVSS
6.4 (medium)
Published
2024-04-24
Title
Essential Addons for Elementor < 5.9.16 - Information Exposure
Fixed in
Fixed in 5.9.16
CVSS
5.3 (medium)
Published
2024-04-24
Title
Essential Addons for Elementor < 5.9.16 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 5.9.16
CVSS
6.4 (medium)
Published
2024-04-16
Title
Essential Addons for Elementor < 5.9.15 - Contributor+ Store XSS via Widget URL
Fixed in
Fixed in 5.9.15
CVSS
5.9 (medium)
Published
2024-03-29
Title
Essential Addons for Elementor < 5.9.14 - Author+ PHP Object Injection
Fixed in
Fixed in 5.9.14
CVSS
6.6 (medium)
Published
2024-03-29
Title
Essential Addons for Elementor < 5.9.14 - Unauthenticated Private/Draft Posts Access
Fixed in
Fixed in 5.9.14
CVSS
5.3 (medium)
Published
2024-03-25
Title
Essential Addons for Elementor < 5.9.12 - Contributor+ Stored XSS
Fixed in
Fixed in 5.9.12
CVSS
5.9 (medium)
Published
2024-03-25
Title
Essential Addons for Elementor < 5.9.12 - Contributor+ Stored XSS
Fixed in
Fixed in 5.9.12
CVSS
5.9 (medium)
Published
2024-03-11
Title
Essential Addons for Elementor < 5.9.10 - Contributor+ Stored Cross-Site Scripting via Event Calendar
Fixed in
Fixed in 5.9.10
CVSS
7.4 (high)
Published
2024-03-11
Title
Essential Addons for Elementor < 5.9.10 - Contributor+ Stored Cross-Site Scripting via Data Table
Fixed in
Fixed in 5.9.10
CVSS
6.4 (medium)
Published
2024-02-12
Title
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders < 5.9.9 - Contributor+ Stored Cross-Site Scripting via Filterable Gallery
Fixed in
Fixed in 5.9.9
CVSS
5.4 (medium)
Published
2024-02-12
Title
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders < 5.9.9 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 5.9.9
CVSS
6.4 (medium)
Published
2024-02-12
Title
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders < 5.9.9 - Contributor+ Stored Cross-Site Scripting via Accordion
Fixed in
Fixed in 5.9.9
CVSS
5.4 (medium)
Published
2024-02-12
Title
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders < 5.9.9 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 5.9.9
CVSS
6.4 (medium)
Published
2024-02-01
Title
Essential Addons for Elementor < 5.9.8 - Contributor+ Stored XSS
Fixed in
Fixed in 5.9.8
CVSS
5.9 (medium)
Published
2024-01-17
Title
Essential Addons for Elementor < 5.9.5 - Contributor+ Stored Cross-Site Scritping
Fixed in
Fixed in 5.9.5
CVSS
6.5 (medium)
Published
2024-01-17
Title
Essential Addons for Elementor < 5.9.5 - Contributor+ Stored Cross-Site Scripting via Image URl
Fixed in
Fixed in 5.9.5
CVSS
5.4 (medium)
Published
2024-01-03
Title
Essential Addons for Elementor < 5.9.3 - Contributor+ Stored XSS
Fixed in
Fixed in 5.9.3
CVSS
5.9 (medium)
Published
2023-09-14
Title
Essential Addons for Elementor < 5.8.9 - Authenticated (Contributor+) Privilege Escalation
Fixed in
Fixed in 5.8.9
CVSS
8.8 (high)
Published
2023-07-19
Title
Essential Addons For Elementor < 5.8.2 - Unauthenticated MailChimp API Key Disclosure
Fixed in
Fixed in 5.8.2
CVSS
5.3 (medium)
Published
2023-05-11
Title
Essential Addons for Elementor 5.4.0-5.7.1 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 5.7.2
CVSS
9.8 (critical)
Published
2022-02-18
Title
Essential Addons for Elementor Lite < 5.0.9 - Reflected Cross-Site Scripting
Fixed in
Fixed in 5.0.9
CVSS
6.1 (medium)
Published
2022-01-31
Title
Essential Addons for Elementor < 5.0.5 - Unauthenticated LFI
Fixed in
Fixed in 5.0.5
CVSS
9.0 (critical)
Published
2021-04-13
Title
Essential Addons for Elementor < 4.5.4 - Contributor+ Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 4.5.4
CVSS
6.8 (medium)