Advisories · Technology

HashThemes Easy Elementor Addons.

Every CVE that names HashThemes Easy Elementor Addons among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-28164 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

WordPress Easy Elementor Addons plugin <= 2.3.7 - Cross Site Request Forgery (CSRF) vulnerability
- HashThemes Easy Elementor Addons
- Cross-site request forgery (CSRF)
Not analysed yet 20 Aug 2026
CVE-2025-58973 CVE record

CVSS 7.5 High

WordPress Easy Elementor Addons Plugin <= 2.2.8 - Local File Inclusion Vulnerability
- hashthemes Easy Elementor Addons
- File inclusion
Not analysed yet 22 Sept 2025
CVE-2025-54712 CVE record

CVSS 4.3 Medium

WordPress Easy Elementor Addons Plugin <= 2.2.7 - Broken Access Control Vulnerability
- hashthemes Easy Elementor Addons
- Broken access control
Not analysed yet 14 Aug 2025
CVE-2025-54704 CVE record

CVSS 6.5 Medium

WordPress Easy Elementor Addons plugin <= 2.2.6 - Cross Site Scripting (XSS) Vulnerability
- hashthemes Easy Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 14 Aug 2025
CVE-2025-48295 CVE record

CVSS 6.5 Medium

WordPress Easy Elementor Addons plugin <= 2.2.5 - Cross Site Scripting (XSS) Vulnerability
- hashthemes Easy Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 16 Jul 2025
CVE-2025-26912 CVE record

CVSS 6.5 Medium

WordPress Easy Elementor Addons plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability
- hashthemes Easy Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 25 Feb 2025
CVE-2025-26761 CVE record

CVSS 6.5 Medium

WordPress Easy Elementor Addons plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability
- hashthemes Easy Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 16 Feb 2025