Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Vendors
Wpdeveloper
Essential Addons For Elementor

wpdeveloper essential addons for elementor Vulnerabilities: CVEs, CISA KEV & Security Advisories

59 CVEs

WD

wpdeveloper essential addons for elementor Vulnerabilities

CVE security advisories and vulnerability history for essential addons for elementor by wpdeveloper.

59

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

6.5

Avg CVSS

2021–2026

Last updated October 1, 2026

Overview

wpdeveloper essential addons for elementor has 59 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

Severity and exploitation

How the CVSS severity of wpdeveloper essential addons for elementor's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High8

Medium48

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of wpdeveloper essential addons for elementor's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of wpdeveloper essential addons for elementor's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every wpdeveloper essential addons for elementor version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

Fixed in

5.9.94 CVEs
5.9.163 CVEs
5.9.203 CVEs
4.6.52 CVEs
5.9.102 CVEs
5.9.142 CVEs
6.0.102 CVEs
6.0.42 CVEs
6.0.82 CVEs
6.1.102 CVEs
6.1.132 CVEs
4.5.41 CVE
5.0.51 CVE
5.7.11 CVE

Find a version

59 CVEs

Sort

WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-102394
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.1% (2th pct)2026-10-01
WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability
CVE-2026-81777
Patch
CWE-290
Medium · CVSS 5.3
EPSS 0.4% (33th pct)2026-08-28
WordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerability
CVE-2026-25440
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.3% (21th pct)2026-06-15
WordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerability
CVE-2026-23543
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.2% (14th pct)2026-02-19
WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-69092
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.2% (4th pct)2025-12-30
WordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerability
CVE-2025-64352
Patch
CWE-862
Low · CVSS 2.7
EPSS 0.2% (13th pct)2025-10-31
Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Calendar` And `Business Reviews` Widgets
CVE-2025-6244
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.2% (9th pct)2025-07-08
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widget
CVE-2024-9993
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.2% (10th pct)2025-06-07
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widget
CVE-2024-9994
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.2% (10th pct)2025-06-07
WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-24752
Patch
CWE-79
High · CVSS 7.1
EPSS 1.2% (68th pct)2025-04-17
WordPress Essential Addons for Elementor plugin <= 6.1.9 - Sensitive Data Exposure Vulnerability
CVE-2025-39589
Patch
CWE-497
Medium · CVSS 4.3
EPSS 0.4% (34th pct)2025-04-16
WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-39590
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.3% (24th pct)2025-04-16
WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerability
CVE-2024-56063
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.3% (16th pct)2024-12-31
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure
CVE-2024-8978
Patch
CWE-200
Medium · CVSS 5.7
EPSS 0.5% (39th pct)2024-11-15
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation
CVE-2024-8979
Patch
CWE-200
High · CVSS 8.0
EPSS 0.5% (42th pct)2024-11-15
Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-8961
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.3% (22th pct)2024-11-15
Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation
CVE-2021-4447
Patch
CWE-862
High · CVSS 8.8
EPSS 0.5% (38th pct)2024-10-16
Essential Addons for Elementor <= 4.6.4 - Missing Authorization
CVE-2021-4446
Patch
CWE-862
Medium · CVSS 6.3
EPSS 0.3% (16th pct)2024-10-16
Essential Addons for Elementor <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery Widget
CVE-2024-8742
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.4% (30th pct)2024-09-13
Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget
CVE-2024-8440
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.4% (31th pct)2024-09-11
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via no_more_items_text Parameter
CVE-2024-7092CWE-79
Medium · CVSS 6.4
EPSS 0.4% (37th pct)2024-08-13
WordPress Essential Addons for Elementor plugin <= 5.9.26 - Cross Site Scripting (XSS) vulnerability
CVE-2024-39649
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.3% (21th pct)2024-08-01
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-5189
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.4% (36th pct)2024-06-11
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lightbox and Modal Widget
CVE-2024-5612
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.3% (17th pct)2024-06-07
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-5188
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.3% (24th pct)2024-06-06
Essential Addons for Elementor <= 5.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Feed
CVE-2024-5073
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.3% (24th pct)2024-05-30
Essential Addons for Elementor PRO – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Carousel Widget
CVE-2024-5086
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.3% (17th pct)2024-05-29
WordPress Essential Addons for Elementor plugin <= 5.8.8 - Contributor+ Privilege Escalation vulnerability
CVE-2023-41955
Patch
CWE-269
High · CVSS 8.8
EPSS 0.8% (56th pct)2024-05-17
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-4624
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.4% (37th pct)2024-05-14
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Interactive Circles'
CVE-2024-4275
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.3% (26th pct)2024-05-10

Showing 30 of 59

Common weakness types

The CWE weakness categories most often found in wpdeveloper essential addons for elementor CVEs. Follow any weakness for its full explanation.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')40 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor5 CVEs
CWE-862Missing Authorization5 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-287Improper Authentication1 CVE
CWE-290Authentication Bypass by Spoofing1 CVE
CWE-352Cross-Site Request Forgery (CSRF)1 CVE
CWE-497Exposure of Sensitive System Information to an Unauthorized Control Sphere1 CVE

Disclosure activity by year

How many wpdeveloper essential addons for elementor CVEs were published each year.

2021

1

2022

2

2023

4

2024

40

2025

8

2026

4

Other wpdeveloper products

Browse vulnerabilities for other products by wpdeveloper.

embedpress28 CVEs essential blocks25 CVEs Essential Blocks for Gutenberg8 CVEs reviewx8 CVEs BetterDocs6 CVEs Templately6 CVEs notificationx5 CVEs simple 301 redirects5 CVEs

All wpdeveloper vulnerabilities

Frequently asked questions

Common questions about wpdeveloper essential addons for elementor vulnerabilities.

How many CVEs does wpdeveloper essential addons for elementor have?: wpdeveloper essential addons for elementor has 59 published CVE records since 2021.
How many wpdeveloper essential addons for elementor CVEs are in CISA KEV?: None of wpdeveloper essential addons for elementor's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for wpdeveloper essential addons for elementor vulnerabilities?: Yes — 1 of wpdeveloper essential addons for elementor's CVEs have a known public exploit.
Which versions of wpdeveloper essential addons for elementor are affected?: 101 distinct wpdeveloper essential addons for elementor versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in wpdeveloper essential addons for elementor CVEs?: wpdeveloper essential addons for elementor's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-862 (Missing Authorization), CWE-20 (Improper Input Validation).
How many critical wpdeveloper essential addons for elementor vulnerabilities are there?: wpdeveloper essential addons for elementor has 2 critical and 8 high-severity CVEs.
What is the average severity of wpdeveloper essential addons for elementor CVEs?: The average CVSS base score across wpdeveloper essential addons for elementor's scored CVEs is 6.5.

References

All wpdeveloper vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track wpdeveloper essential addons for elementor vulnerabilities

Get an alert for each new wpdeveloper essential addons for elementor CVE, with AI-written analysis and remediation steps.

Create an account See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References

5.7.2

1 CVE

5.8.121 CVE

5.8.151 CVE

5.8.161 CVE

5.8.91 CVE

5.9.111 CVE

5.9.121 CVE

5.9.151 CVE

5.9.181 CVE

5.9.211 CVE

5.9.221 CVE

5.9.231 CVE

5.9.241 CVE

5.9.271 CVE

6.0.151 CVE

6.1.201 CVE

6.3.01 CVE

6.5.41 CVE

6.5.61 CVE

6.6.01 CVE

6.8.11 CVE

6.8.51 CVE