# leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets. Every CVE that names leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Premium Addons for Elementor <= 4.11.84 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'premium_tooltip_text' Parameter](https://agentprime.io/advisories/CVE-2026-12141.md) `CVE-2026-12141` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 4.9 Medium · Not analysed yet · Published 11 Jul 2026 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.11.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_svg' Parameter](https://agentprime.io/advisories/CVE-2026-4790.md) `CVE-2026-4790` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 5.4 Medium · Not analysed yet · Published 2 May 2026 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.11.53 - Cross-Site Request Forgery via 'insert_inner_template'](https://agentprime.io/advisories/CVE-2025-14163.md) `CVE-2025-14163` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 4.3 Medium · Not analysed yet · Published 23 Dec 2025 · Tags: Cross-site request forgery (CSRF) - [Premium Addons for Elementor <= 4.11.53 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'get_template_content'](https://agentprime.io/advisories/CVE-2025-14155.md) `CVE-2025-14155` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 5.3 Medium · Not analysed yet · Published 23 Dec 2025 · Tags: Broken access control - [Premium Addons for Elementor <= 4.10.69 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-11937.md) `CVE-2024-11937` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 4 Jul 2025 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget](https://agentprime.io/advisories/CVE-2025-4774.md) `CVE-2025-4774` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.10.60 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Box Widget](https://agentprime.io/advisories/CVE-2024-10266.md) `CVE-2024-10266` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 29 Oct 2024 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.5.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update](https://agentprime.io/advisories/CVE-2021-4445.md) `CVE-2021-4445` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2024 · Tags: Broken access control - [Premium Addons for Elementor <= 4.10.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Media Grid Widget](https://agentprime.io/advisories/CVE-2024-8681.md) `CVE-2024-8681` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 27 Sept 2024 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.10.38 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion and Arbitrary Title Update](https://agentprime.io/advisories/CVE-2024-6824.md) `CVE-2024-6824` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 4.3 Medium · Not analysed yet · Published 8 Aug 2024 · Tags: Broken access control - [Premium Addons for Elementor <= 4.10.36 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Animated Text Widget](https://agentprime.io/advisories/CVE-2024-6495.md) `CVE-2024-6495` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 12 Jul 2024 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.10.35 - Regular Expressions Denial of Service](https://agentprime.io/advisories/CVE-2024-6434.md) `CVE-2024-6434` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 3.1 Low · Not analysed yet · Published 4 Jul 2024 · Tags: Denial of service - [Premium Addons for Elementor <= 4.10.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget](https://agentprime.io/advisories/CVE-2024-6340.md) `CVE-2024-6340` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 3 Jul 2024 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.10.33 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-5553.md) `CVE-2024-5553` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 4.4 Medium · Not analysed yet · Published 12 Jun 2024 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Global Tooltip](https://agentprime.io/advisories/CVE-2024-4379.md) `CVE-2024-4379` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 5.4 Medium · Not analysed yet · Published 31 May 2024 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget](https://agentprime.io/advisories/CVE-2024-4376.md) `CVE-2024-4376` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 31 May 2024 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.10.31 - Missing Authorization to Information Disclosure](https://agentprime.io/advisories/CVE-2024-4205.md) `CVE-2024-4205` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 4.3 Medium · Not analysed yet · Published 31 May 2024 · Tags: Broken access control - [Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Menu and Shape Divider](https://agentprime.io/advisories/CVE-2024-4378.md) `CVE-2024-4378` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 23 May 2024 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-4203.md) `CVE-2024-4203` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 5.4 Medium · Not analysed yet · Published 2 May 2024 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'arrow_style'](https://agentprime.io/advisories/CVE-2024-3647.md) `CVE-2024-3647` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 2 May 2024 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-3885.md) `CVE-2024-3885` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 2 May 2024 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-2666.md) `CVE-2024-2666` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 5.4 Medium · Not analysed yet · Published 10 Apr 2024 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-2664.md) `CVE-2024-2664` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 10 Apr 2024 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.10.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button](https://agentprime.io/advisories/CVE-2024-2665.md) `CVE-2024-2665` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 10 Apr 2024 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.10.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link Widget](https://agentprime.io/advisories/CVE-2024-0376.md) `CVE-2024-0376` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.10.23 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-2399.md) `CVE-2024-2399` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 15 Mar 2024 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.10.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Banner, Team Members, and Image Scroll Widgets](https://agentprime.io/advisories/CVE-2024-1680.md) `CVE-2024-1680` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 13 Mar 2024 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.10.17 - Authenticated(Contributor+) Stored Cross-Site Scripting via Link Wrapper](https://agentprime.io/advisories/CVE-2024-0326.md) `CVE-2024-0326` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 13 Mar 2024 · Tags: Cross-site scripting (XSS) - [Premium Addons for Elementor <= 4.10.18 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-1242.md) `CVE-2024-1242` · CVE record: leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 20 Feb 2024 · Tags: Cross-site scripting (XSS) ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .