Plugin icon

Exclusive Addons for Elementor

exclusive-addons-for-elementor

Vulnerabilities:

23

Last Updated:

December 2, 2025

Active Installs:

60000

Published
Title
Fixed in
CVSS
Published
2025-08-05
Title
Exclusive Addons for Elementor < 2.7.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown
Fixed in
Fixed in 2.7.9.5
CVSS
6.4 (medium)
Published
2025-05-26
Title
Exclusive Addons for Elementor < 2.7.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget
Fixed in
Fixed in 2.7.9.2
CVSS
6.4 (medium)
Published
2025-05-19
Title
Exclusive Addons Elementor < 2.7.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.7.9.1
CVSS
4.4 (medium)
Published
2025-02-27
Title
Exclusive Addons for Elementor < 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Image Comparison Widgets
Fixed in
Fixed in 2.7.7
CVSS
6.4 (medium)
Published
2024-10-28
Title
Exclusive Addons for Elementor < 2.7.5 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Fixed in
Fixed in 2.7.5
CVSS
4.3 (medium)
Published
2024-10-15
Title
Exclusive Addons Elementor < 2.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.7.2
CVSS
6.4 (medium)
Published
2024-06-25
Title
Exclusive Addons for Elementor < 2.6.9.9 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Card Widget
Fixed in
Fixed in 2.6.9.9
CVSS
6.4 (medium)
Published
2024-05-14
Title
Exclusive Addons for Elementor < 2.6.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget
Fixed in
Fixed in 2.6.9.7
CVSS
6.4 (medium)
Published
2024-04-29
Title
Exclusive Addons Elementor < 2.6.9.2 - Missing Authorization to Post Duplication
Fixed in
Fixed in 2.6.9.2
CVSS
5.4 (medium)
Published
2024-04-22
Title
Exclusive Addons for Elementor < 2.6.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call to Action
Fixed in
Fixed in 2.6.9.5
CVSS
6.4 (medium)
Published
2024-04-22
Title
Exclusive Addons for Elementor < 2.6.9.4 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 2.6.9.4
CVSS
6.4 (medium)
Published
2024-04-22
Title
Exclusive Addons for Elementor < 2.6.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Expired Title
Fixed in
Fixed in 2.6.9.5
CVSS
6.4 (medium)
Published
2024-04-15
Title
Exclusive Addons for Elementor < 2.6.9.3 - Contributor+ Stored XSS
Fixed in
Fixed in 2.6.9.3
CVSS
5.9 (medium)
Published
2024-04-15
Title
Exclusive Addons for Elementor < 2.6.9.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Post Grid
Fixed in
Fixed in 2.6.9.3
CVSS
6.4 (medium)
Published
2024-03-26
Title
Exclusive Addons Elementor < 2.6.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.6.9.1
CVSS
6.4 (medium)
Published
2024-03-25
Title
Exclusive Addons Elementor < 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.6.9
CVSS
6.4 (medium)
Published
2024-02-29
Title
Exclusive Addons for Elementor < 2.6.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call To Action Widget
Fixed in
Fixed in 2.6.9.1
CVSS
6.4 (medium)
Published
2024-02-29
Title
Exclusive Addons for Elementor < 2.6.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget
Fixed in
Fixed in 2.6.9.1
CVSS
6.4 (medium)
Published
2024-02-29
Title
Exclusive Addons for Elementor < 2.6.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.6.9.1
CVSS
6.4 (medium)
Published
2024-02-29
Title
Exclusive Addons for Elementor < 2.6.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Covid-19 Stats Widget
Fixed in
Fixed in 2.6.9.1
CVSS
6.4 (medium)
Published
2024-01-26
Title
Exclusive Addons for Elementor < 2.6.9 - Contributor+ Stored XSS
Fixed in
Fixed in 2.6.9
CVSS
5.4 (medium)
Published
2024-01-26
Title
Exclusive Addons for Elementor < 2.6.9 - Contributor+ Stored XSS
Fixed in
Fixed in 2.6.9
CVSS
6.4 (medium)
Published
2023-01-27
Title
Exclusive Addons Elementor < 2.6.2 - Arbitrary Uninstall Reason Feedback via CSRF
Fixed in
Fixed in 2.6.2
CVSS
4.3 (medium)