Plugin icon

UltraAddons for Elementor

ultraaddons-elementor-lite

Vulnerabilities:

6

Last Updated:

October 15, 2026

Active Installs:

600

Published
Title
Fixed in
CVSS
Published
2025-05-16
Title
UltraAddons Elementor Lite <= 3.0.0 - Contributor+ Stored XSS
Fixed in
No known fix
CVSS
5.9 (medium)
Published
2025-04-04
Title
UltraAddons < 3.0.0 - Cross-Site Request Forgery
Fixed in
Fixed in 3.0.0
CVSS
4.3 (medium)
Published
2024-11-20
Title
UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) < 1.1.9 - Insecure Direct Object Reference to Sensitive Information Exposure via UA_Template Shortcode
Fixed in
Fixed in 1.1.9
CVSS
4.3 (medium)
Published
2024-10-15
Title
UltraAddons Elementor Lite <= 3.0.0 - Author+ Stored XSS
Fixed in
No known fix
CVSS
5.9 (medium)
Published
2024-07-09
Title
UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) < 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Fixed in
Fixed in 1.1.7
CVSS
6.4 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.1.0
CVSS
6.1 (medium)