Advisories · Technology
Essential Addons for Elementor.
Every CVE that names Essential Addons for Elementor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.2 Medium
Essential Addons for Elementor 6.6.0 - 6.8.7 - Author+ Privilege Escalation via register_user_role
- Essential Addons for Elementor
- Privilege escalation
- CVSS 5.3 Medium
Essential Addons for Elementor 6.7.3 - 6.8.6 - Unauthenticated Registration Approval Bypass via OTP Verification
- Essential Addons for Elementor
- Broken access control
- CVSS 5.3 Medium
Essential Addons for Elementor < 6.8.7 - Unauthenticated Private Post Meta Disclosure via load_more AJAX Handler
- Essential Addons for Elementor
- Information disclosure
- CVSS 3.8 Low
Essential Addons for Elementor < 6.8.7 - Admin+ Cross-Site User Approval State Change via Bulk Action
- Essential Addons for Elementor
- Broken access control
- CVSS 3.5 Low
Essential Addons for Elementor < 6.8.7 - Author+ Content Injection via Pricing Table and Post Timeline Title Tag
- Essential Addons for Elementor
- CWE-345
- CVSS 8.1 High
Essential Addons for Elementor < 6.7.2 - Unauthenticated Privilege Escalation via Custom Profile Field Mass Assignment
- Essential Addons for Elementor
- Privilege escalation
- CVSS 5.3 Medium
Essential Addons for Elementor - Lite < 6.6.10 - Unauthenticated Draft/Private WooCommerce Product Disclosure via Compare Table
- Essential Addons for Elementor
- Broken access control
- CVSS 4.8 Medium
Essential Addons for Elementor - Lite < 6.6.10 - Contributor+ Stored XSS via Pricing Table Title Tag
- Essential Addons for Elementor
- Cross-site scripting (XSS)
-
Essential Addons for Elementor < 5.0.5 - Unauthenticated LFI
- Essential Addons for Elementor
- Path traversal
-
Essential Addons for Elementor < 4.5.4 - Contributor+ Stored Cross-Site Scripting (XSS)
- Essential Addons for Elementor
- Cross-site scripting (XSS)