Plugin icon

Ultimate Addons for Elementor

header-footer-elementor

Vulnerabilities:

12

Last Updated:

March 31, 2026

Active Installs:

2000000

Published
Title
Fixed in
CVSS
Published
2025-09-15
Title
Ultimate Addons for Elementor Lite < 2.5.0 - Author+ Stored XSS
Fixed in
Fixed in 2.5.0
CVSS
6.8 (medium)
Published
2025-08-01
Title
Ultimate Addons for Elementor < 2.4.7 - Subscriber+ Limited Settings Update
Fixed in
Fixed in 2.4.7
CVSS
4.3 (medium)
Published
2024-12-22
Title
Elementor Header & Footer Builder < 1.6.47 - Contributor+ Stored XSS via Page Title Widget
Fixed in
Fixed in 1.6.47
CVSS
5.9 (medium)
Published
2024-11-07
Title
Elementor Header & Footer Builder < 1.6.46 - Author+ Stored XSS via SVG File Upload
Fixed in
Fixed in 1.6.46
CVSS
5.9 (medium)
Published
2024-10-23
Title
Elementor Header & Footer Builder < 1.6.44 - Authenticated (Contributor+) Information Disclosure via Shortcode
Fixed in
Fixed in 1.6.44
CVSS
4.3 (medium)
Published
2024-07-01
Title
Elementor – Header, Footer & Blocks Template < 1.6.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.6.36
CVSS
6.4 (medium)
Published
2024-06-12
Title
Elementor Header & Footer Builder < 1.6.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Title Widget
Fixed in
Fixed in 1.6.36
CVSS
6.4 (medium)
Published
2024-05-23
Title
Elementor Header & Footer Builder < 1.6.26.1 - Contributor+ Stored XSS
Fixed in
Fixed in 1.6.26.1
CVSS
5.9 (medium)
Published
2024-05-16
Title
Elementor Header & Footer Builder < 1.6.27 - Authenticated (Author+) HTML Injection
Fixed in
Fixed in 1.6.27
CVSS
5 (medium)
Published
2024-05-15
Title
Elementor Header & Footer Builder < 1.6.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.6.29
CVSS
6.4 (medium)
Published
2024-03-11
Title
Elementor Header & Footer Builder < 1.6.25 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.6.25
CVSS
6.4 (medium)
Published
2021-04-13
Title
Elementor - Header, Footer & Blocks Template < 1.5.8 - Contributor+ Stored XSS
Fixed in
Fixed in 1.5.8
CVSS
6.8 (medium)