Plugin icon

The Plus Addons for Elementor - Pro

theplus_elementor_addon

Vulnerabilities:

12

Last Updated:

June 15, 2023

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2025-07-16
Title
The Plus Addons for Elementor Pro < 6.3.7 - Missing Authorization
Fixed in
Fixed in 6.3.7
CVSS
4.3 (medium)
Published
2025-05-20
Title
The Plus Addons for Elementor Pro < 6.3.7 - Missing Authorization
Fixed in
Fixed in 6.3.7
CVSS
4.3 (medium)
Published
2024-06-20
Title
The Plus Addons for Elementor Page Builder < 5.6.0 - Reflected Cross-Site Scripting via WP Login and Register Widget
Fixed in
Fixed in 5.6.0
CVSS
6.1 (medium)
Published
2024-06-20
Title
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce < 5.6.0 - Authenticated (Contributor+) Local File Inclusion
Fixed in
Fixed in 5.6.0
CVSS
8.8 (high)
Published
2024-05-29
Title
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce < 5.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Title Widget
Fixed in
Fixed in 5.5.5
CVSS
6.4 (medium)
Published
2023-10-31
Title
The Plus Addons for Elementor Pro < 5.2.9 - Unauthenticated Local File Inclusion
Fixed in
Fixed in 5.2.9
CVSS
9.8 (critical)
Published
2021-12-13
Title
The Plus Addons for Elementor Pro < 5.0.7 - Unauthenticated SQL Injection
Fixed in
Fixed in 5.0.7
CVSS
6.8 (medium)
Published
2021-12-13
Title
The Plus Addons for Elementor Pro < 5.0.7 - Sensitive Data Disclosure
Fixed in
Fixed in 5.0.7
CVSS
5.3 (medium)
Published
2021-05-31
Title
The Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect
Fixed in
Fixed in 4.1.10
CVSS
4.3 (medium)
Published
2021-05-31
Title
The Plus Addons for Elementor Page Builder < 4.1.11 - Arbitrary Reset Pwd Email Sending
Fixed in
Fixed in 4.1.11
CVSS
7.5 (high)
Published
2021-05-31
Title
The Plus Addons for Elementor < 4.1.12 - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 4.1.12
CVSS
6.1 (medium)
Published
2021-03-08
Title
The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass
Fixed in
Fixed in 4.1.7
CVSS
9.8 (critical)