Plugin icon

Premium Addons for Elementor – Powerful Elementor Templates & Widgets

premium-addons-for-elementor

Vulnerabilities:

34

Last Updated:

December 23, 2025

Active Installs:

700000

Published
Title
Fixed in
CVSS
Published
2025-12-22
Title
Premium Addons for Elementor < 4.11.54 - Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 4.11.54
CVSS
5.3 (medium)
Published
2025-12-22
Title
Premium Addons for Elementor < 4.11.54 - Arbitrary Template Creation via CSRF
Fixed in
Fixed in 4.11.54
CVSS
4.3 (medium)
Published
2025-07-03
Title
Premium Addons for Elementor < 4.10.70 - Contributor+ Stored XSS
Fixed in
Fixed in 4.10.70
CVSS
5.9 (medium)
Published
2025-06-09
Title
Premium Addons for Elementor < 4.11.9 - Contributor+ Stored XSS via Countdown Widget
Fixed in
Fixed in 4.11.9
CVSS
5.9 (medium)
Published
2024-12-19
Title
Premium Addons for Elementor < 4.10.57 - Missing Authorization
Fixed in
Fixed in 4.10.57
CVSS
2.7 (low)
Published
2024-10-28
Title
Premium Addons for Elementor < 4.10.61 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Box Widget
Fixed in
Fixed in 4.10.61
CVSS
6.4 (medium)
Published
2024-09-26
Title
Premium Addons for Elementor < 4.10.53 - Authenticated (Contributor+) Stored Cross-Site Scripting via Media Grid Widget
Fixed in
Fixed in 4.10.53
CVSS
6.4 (medium)
Published
2024-08-07
Title
Premium Addons for Elementor < 4.10.39 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion and Arbitrary Title Update
Fixed in
Fixed in 4.10.39
CVSS
4.3 (medium)
Published
2024-07-11
Title
Premium Addons for Elementor < 4.10.37 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Animated Text Widget
Fixed in
Fixed in 4.10.37
CVSS
6.4 (medium)
Published
2024-07-09
Title
Premium Addons for Elementor < 4.10.35 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.10.35
CVSS
6.5 (medium)
Published
2024-07-03
Title
Premium Addons for Elementor < 4.10.36 - Regular Expressions Denial of Service
Fixed in
Fixed in 4.10.36
CVSS
3.1 (low)
Published
2024-07-02
Title
Premium Addons for Elementor < 4.10.36 - Contributor+ Stored Cross-Site Scripting via Countdown Widget
Fixed in
Fixed in 4.10.36
CVSS
6.4 (medium)
Published
2024-06-11
Title
Premium Addons for Elementor < 4.10.34 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Fixed in
Fixed in 4.10.34
CVSS
4.4 (medium)
Published
2024-05-30
Title
Premium Addons for Elementor < 4.10.32 - Contributor+ DOM-Based Stored Cross-Site Scripting via Global Tooltip
Fixed in
Fixed in 4.10.32
CVSS
5.4 (medium)
Published
2024-05-30
Title
Premium Addons for Elementor < 4.10.32 - Missing Authorization to Information Disclosure
Fixed in
Fixed in 4.10.32
CVSS
4.3 (medium)
Published
2024-05-30
Title
Premium Addons for Elementor < 4.10.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget
Fixed in
Fixed in 4.10.32
CVSS
6.4 (medium)
Published
2024-05-30
Title
Premium Addons for Elementor < 4.10.32 - Missing Authorization to Information Disclosure
Fixed in
Fixed in 4.10.32
CVSS
4.3 (medium)
Published
2024-05-22
Title
Premium Addons for Elementor < 4.10.32 - Contributor+ Stored XSS
Fixed in
Fixed in 4.10.32
CVSS
5.9 (medium)
Published
2024-04-29
Title
Premium Addons for Elementor < 4.10.31 - Contributor+ Stored XSS
Fixed in
Fixed in 4.10.31
CVSS
5.4 (medium)
Published
2024-04-24
Title
Premium Addons for Elementor < 4.10.29 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 4.10.29
CVSS
6.4 (medium)
Published
2024-04-23
Title
Premium Addons for Elementor < 4.10.29 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 4.10.29
CVSS
6.4 (medium)
Published
2024-04-22
Title
Premium Addons for Elementor < 4.10.26 - Contributor+ Stored XSS
Fixed in
Fixed in 4.10.26
CVSS
6.4 (medium)
Published
2024-04-09
Title
Premium Addons for Elementor < 4.10.28 - Contributor+ Stored Cross-Site Scripting via Button
Fixed in
Fixed in 4.10.28
CVSS
6.5 (medium)
Published
2024-04-09
Title
Premium Addons for Elementor < 4.10.25 - Contributor+ DOM-Based Stored Cross-Site Scripting
Fixed in
Fixed in 4.10.25
CVSS
5.4 (medium)
Published
2024-04-09
Title
Premium Addons for Elementor < 4.10.25 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 4.10.25
CVSS
6.4 (medium)
Published
2024-04-09
Title
Premium Addons for Elementor < 4.10.17 - Contributor+ Stored Cross-Site Scripting via Wrapper Link Widget
Fixed in
Fixed in 4.10.17
CVSS
6.4 (medium)
Published
2024-04-05
Title
Premium Addons for Elementor < 4.10.23 - Authenticated (Contributor+) Sensitive Information Exposure
Fixed in
Fixed in 4.10.23
CVSS
5.3 (medium)
Published
2024-03-14
Title
Premium Addons for Elementor (Free < 4.10.24, Pro < 2.9.14) - Contributor+ Stored XSS
Fixed in
Fixed in 4.10.24
CVSS
5.9 (medium)
Published
2024-02-28
Title
Premium Addons for Elementor < 4.10.22 - Contributor+ Stored XSS
Fixed in
Fixed in 4.10.22
CVSS
5.9 (medium)
Published
2024-02-14
Title
Premium Addons for Elementor < 4.10.19 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 4.10.19
CVSS
4.9 (medium)
Published
2024-02-14
Title
Premium Addons for Elementor < 4.10.19 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 4.10.19
CVSS
6.4 (medium)
Published
2024-02-02
Title
Premium Addons for Elementor < 4.10.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.10.17
CVSS
6.4 (medium)
Published
2021-08-30
Title
Premium Addons for Elementor < 4.5.2 - Subscriber+ Arbitrary Blog Option Update
Fixed in
Fixed in 4.5.2
CVSS
7.1 (high)
Published
2021-04-13
Title
Premium Addons for Elementor < 4.2.8 - Contributor+ Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 4.2.8
CVSS
6.8 (medium)