How many Xpro Xpro Elementor Addons CVEs are in CISA KEV?

None of Xpro Xpro Elementor Addons's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Xpro Xpro Elementor Addons are affected?

26 distinct Xpro Xpro Elementor Addons versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Xpro Xpro Elementor Addons CVEs?

Xpro Xpro Elementor Addons's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).

How many critical Xpro Xpro Elementor Addons vulnerabilities are there?

Xpro Xpro Elementor Addons has 1 critical and 1 high-severity CVEs.

What is the average severity of Xpro Xpro Elementor Addons CVEs?

The average CVSS base score across Xpro Xpro Elementor Addons's scored CVEs is 7.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Xpro

8 CVEs

Xpro Elementor Addons Vulnerabilities

Name: Xpro Elementor Addons vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Xpro Elementor Addons by Xpro.

8

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.0

Avg CVSS

2024–2026

Last updated May 12, 2026

Overview

Xpro Elementor Addons has 8 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Xpro Elementor Addons, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Xpro Elementor Addons's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High1

Medium6

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Xpro Elementor Addons's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Xpro Elementor Addons CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Xpro Elementor Addons version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 1.4.19.12 CVEs
>= 1.4.202 CVEs
<= 1.4.101 CVE
<= 1.4.171 CVE
<= 1.4.31 CVE
<= 1.4.4.21 CVE
<= 1.4.6.51 CVE
<= 1.5.11 CVE
>= 1.4.111 CVE
>= 1.4.181 CVE
>= 1.4.4.31 CVE
>= 1.4.6.61 CVE
>= 1.5.21 CVE

Fixed in

> 1.4.19.12 CVEs
1.4.202 CVEs
> 1.4.101 CVE
> 1.4.171 CVE
> 1.4.31 CVE
> 1.4.4.21 CVE
> 1.4.6.51 CVE
> 1.5.11 CVE
1.4.111 CVE
1.4.181 CVE
1.4.4.31 CVE
1.4.6.61 CVE
1.5.21 CVE

Find a version

8 CVEs

Sort

WordPress Xpro Elementor Addons plugin <= 1.5.1 - SQL Injection vulnerability
CVE-2026-45214
Patch
CWE-89
High · CVSS 8.5
EPSS 0.2% (13th pct)2026-05-12
WordPress Xpro Elementor Addons plugin <= 1.4.19.1 - Arbitrary File Upload vulnerability
CVE-2025-69312
Patch
CWE-434
Critical · CVSS 9.1
EPSS 0.3% (26th pct)2026-01-22
WordPress Xpro Elementor Addons plugin <= 1.4.19.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-63044
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.2% (13th pct)2025-12-09
WordPress Xpro Elementor Addons Plugin <= 1.4.17 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58195
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.2% (6th pct)2025-08-27
WordPress Xpro Elementor Addons plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32163
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.4% (29th pct)2025-04-04
WordPress Xpro Addons For Elementor plugin <= 1.4.6.5 - Cross Site Scripting (XSS) vulnerability
CVE-2024-54253
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.3% (27th pct)2024-12-09
WordPress Xpro Elementor Addons plugin <= 1.4.4.2 - Cross Site Scripting (XSS) vulnerability
CVE-2024-43150
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.3% (18th pct)2024-08-12
WordPress Xpro Elementor Addons plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability
CVE-2024-34570
Patch
CWE-79
Medium · CVSS 5.9
EPSS 0.3% (20th pct)2024-05-08

Common weakness types

The CWE weakness categories most often found in Xpro Elementor Addons CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Xpro Elementor Addons CVEs were published each year.

2024

3

2025

3

2026

2

Other Xpro products

Browse vulnerabilities for other products by Xpro.

Xpro Addons — 140+ Widgets for Elementor13 CVEs Xpro Addons For Beaver Builder – Lite2 CVEs Xpro Theme Builder2 CVEs

All Xpro vulnerabilities

Frequently asked questions

Common questions about Xpro Elementor Addons vulnerabilities.

How many CVEs does Xpro Xpro Elementor Addons have?: Xpro Xpro Elementor Addons has 8 published CVE records since 2024.
How many Xpro Xpro Elementor Addons CVEs are in CISA KEV?: None of Xpro Xpro Elementor Addons's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Xpro Xpro Elementor Addons vulnerabilities?: No Xpro Xpro Elementor Addons CVEs currently have a tracked public exploit in this dataset.
Which versions of Xpro Xpro Elementor Addons are affected?: 26 distinct Xpro Xpro Elementor Addons versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Xpro Xpro Elementor Addons CVEs?: Xpro Xpro Elementor Addons's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).
How many critical Xpro Xpro Elementor Addons vulnerabilities are there?: Xpro Xpro Elementor Addons has 1 critical and 1 high-severity CVEs.
What is the average severity of Xpro Xpro Elementor Addons CVEs?: The average CVSS base score across Xpro Xpro Elementor Addons's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Xpro Elementor Addons vulnerabilities

Monitor new Xpro Elementor Addons vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing