Essential Addons For Elementor (Unknown) - vulnerabilities (CVEs)
9 CVEs, 4 in the last 30 days, 1 known versions, newest CVE from 2026-10-28. Vendor: Unknown.
CVEs of Essential Addons For Elementor
- CVE-2026-110508 - CVSS 5.3 (medium), 2026-10-28: The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement to accounts registered through its…
- CVE-2026-110509 - CVSS 5.3 (medium), 2026-10-28: The Essential Addons for Elementor WordPress plugin before 6.8.7 does not restrict the post type or meta query an unauthenticated visitor can pass to its…
- CVE-2026-110537 - CVSS 3.8 (low), 2026-10-23: The Essential Addons for Elementor WordPress plugin before 6.8.7 does not verify that an administrator may manage the specific user accounts targeted by its…
- CVE-2026-110510 - CVSS 3.5 (low), 2026-10-23: The Essential Addons for Elementor WordPress plugin before 6.8.7 does not validate the HTML tag setting of some of its widgets before using it to build…
- CVE-2026-18039 - CVSS 8.1 (high), 2026-08-14: The Essential Addons for Elementor WordPress plugin before 6.7.2 does not prevent user-supplied registration fields from overwriting reserved account…
- CVE-2026-13345 - CVSS 5.3 (medium), 2026-07-30: The Essential Addons for Elementor WordPress plugin before 6.6.10 does not perform authorization, status, or visibility checks when resolving WooCommerce…
- CVE-2026-13344 - CVSS 4.8 (medium), 2026-07-30: The Essential Addons for Elementor WordPress plugin before 6.6.10 does not validate the HTML tag name of the Pricing Table widget title before outputting it,…
- CVE-2022-0320 - CVSS 9.8 (critical), 2022-02-01: The Essential Addons for Elementor WordPress plugin before 5.0.5 does not validate and sanitise some template data before it them in include statements, which…
- CVE-2021-24255 - CVSS 5.4 (medium), 2021-05-05: The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cross-Site Scripting (XSS) by…
