Advisories · Technology

leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets.

Every CVE that names leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-12141 CVE record

CVSS 4.9 Medium

Premium Addons for Elementor <= 4.11.84 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'premium_tooltip_text' Parameter
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 11 Jul 2026
CVE-2026-4790 CVE record

CVSS 5.4 Medium

Premium Addons for Elementor <= 4.11.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_svg' Parameter
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 2 May 2026
CVE-2025-14163 CVE record

CVSS 4.3 Medium

Premium Addons for Elementor <= 4.11.53 - Cross-Site Request Forgery via 'insert_inner_template'
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site request forgery (CSRF)
Not analysed yet 23 Dec 2025
CVE-2025-14155 CVE record

CVSS 5.3 Medium

Premium Addons for Elementor <= 4.11.53 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'get_template_content'
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Broken access control
Not analysed yet 23 Dec 2025
CVE-2024-11937 CVE record

CVSS 6.4 Medium

Premium Addons for Elementor <= 4.10.69 - Authenticated (Contributor+) Stored Cross-Site Scripting
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 4 Jul 2025
CVE-2025-4774 CVE record

CVSS 6.4 Medium

Premium Addons for Elementor <= 4.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2024-10266 CVE record

CVSS 6.4 Medium

Premium Addons for Elementor <= 4.10.60 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Box Widget
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 29 Oct 2024
CVE-2021-4445 CVE record

CVSS 6.5 Medium

Premium Addons for Elementor <= 4.5.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Broken access control
Not analysed yet 16 Oct 2024
CVE-2024-8681 CVE record

CVSS 6.4 Medium

Premium Addons for Elementor <= 4.10.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Media Grid Widget
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 27 Sept 2024
CVE-2024-6824 CVE record

CVSS 4.3 Medium

Premium Addons for Elementor <= 4.10.38 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion and Arbitrary Title Update
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Broken access control
Not analysed yet 8 Aug 2024
CVE-2024-6495 CVE record

CVSS 6.4 Medium

Premium Addons for Elementor <= 4.10.36 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Animated Text Widget
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 12 Jul 2024
CVE-2024-6434 CVE record

CVSS 3.1 Low

Premium Addons for Elementor <= 4.10.35 - Regular Expressions Denial of Service
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Denial of service
Not analysed yet 4 Jul 2024
CVE-2024-6340 CVE record

CVSS 6.4 Medium

Premium Addons for Elementor <= 4.10.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 3 Jul 2024
CVE-2024-5553 CVE record

CVSS 4.4 Medium

Premium Addons for Elementor <= 4.10.33 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 12 Jun 2024
CVE-2024-4379 CVE record

CVSS 5.4 Medium

Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Global Tooltip
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 31 May 2024
CVE-2024-4376 CVE record

CVSS 6.4 Medium

Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 31 May 2024
CVE-2024-4205 CVE record

CVSS 4.3 Medium

Premium Addons for Elementor <= 4.10.31 - Missing Authorization to Information Disclosure
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Broken access control
Not analysed yet 31 May 2024
CVE-2024-4378 CVE record

CVSS 6.4 Medium

Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Menu and Shape Divider
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 23 May 2024
CVE-2024-4203 CVE record

CVSS 5.4 Medium

Premium Addons for Elementor <= 4.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 2 May 2024
CVE-2024-3647 CVE record

CVSS 6.4 Medium

Premium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'arrow_style'
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 2 May 2024
CVE-2024-3885 CVE record

CVSS 6.4 Medium

Premium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 2 May 2024
CVE-2024-2666 CVE record

CVSS 5.4 Medium

Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 10 Apr 2024
CVE-2024-2664 CVE record

CVSS 6.4 Medium

Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 10 Apr 2024
CVE-2024-2665 CVE record

CVSS 6.4 Medium

Premium Addons for Elementor <= 4.10.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 10 Apr 2024
CVE-2024-0376 CVE record

CVSS 6.4 Medium

Premium Addons for Elementor <= 4.10.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link Widget
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 9 Apr 2024
CVE-2024-2399 CVE record

CVSS 6.4 Medium

Premium Addons for Elementor <= 4.10.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 15 Mar 2024
CVE-2024-1680 CVE record

CVSS 6.4 Medium

Premium Addons for Elementor <= 4.10.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Banner, Team Members, and Image Scroll Widgets
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 13 Mar 2024
CVE-2024-0326 CVE record

CVSS 6.4 Medium

Premium Addons for Elementor <= 4.10.17 - Authenticated(Contributor+) Stored Cross-Site Scripting via Link Wrapper
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 13 Mar 2024
CVE-2024-1242 CVE record

CVSS 6.4 Medium

Premium Addons for Elementor <= 4.10.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
- leap13 Premium Addons for Elementor – Powerful Elementor Templates & Widgets
- Cross-site scripting (XSS)
Not analysed yet 20 Feb 2024