Plugin icon

Events Addon for Elementor

events-addon-for-elementor

Vulnerabilities:

10

Last Updated:

August 28, 2025

Active Installs:

8000

Published
Title
Fixed in
CVSS
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Fixed in
Fixed in 2.2.5
CVSS
7.1 (high)
Published
2025-08-28
Title
Events Addon for Elementor < 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter and Countdown Widgets
Fixed in
Fixed in 2.3.0
CVSS
6.4 (medium)
Published
2024-12-17
Title
Events Addon for Elementor < 2.2.4 - Authenticated (Contributor+) Post Disclosure
Fixed in
Fixed in 2.2.4
CVSS
4.3 (medium)
Published
2024-12-11
Title
Events Addon for Elementor < 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.2.3
CVSS
6.4 (medium)
Published
2024-10-14
Title
Events Addon for Elementor < 2.2.1 - Contributor+ Stored XSS
Fixed in
Fixed in 2.2.1
CVSS
5.9 (medium)
Published
2024-06-11
Title
Events Addon for Elementor < 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Fixed in
Fixed in 2.1.7
CVSS
6.4 (medium)
Published
2023-11-14
Title
Events Addon for Elementor < 2.1.3 - Cross-Site Request Forgery
Fixed in
Fixed in 2.1.3
CVSS
4.3 (medium)
Published
2023-11-14
Title
Events Addon for Elementor < 2.1.3 - Missing Authorization
Fixed in
Fixed in 2.1.3
CVSS
5.3 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.0.3
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 1.9.8
CVSS
4.3 (medium)