# Livemesh Addons by Elementor.

Every CVE that names Livemesh Addons by Elementor among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Livemesh Addons by Elementor <= 9.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via Plugin Settings](https://agentprime.io/advisories/CVE-2026-1572.md)
  `CVE-2026-1572` · CVE record: livemesh Livemesh Addons by Elementor · CVSS 6.4 Medium · Not analysed yet · Published 16 Apr 2026 · Tags: Cross-site scripting (XSS)
- [Livemesh Addons by Elementor <= 9.0 - Authenticated (Contributor+) Local File Inclusion via Widget Template Parameter](https://agentprime.io/advisories/CVE-2026-1620.md)
  `CVE-2026-1620` · CVE record: livemesh Livemesh Addons by Elementor · CVSS 8.8 High · Not analysed yet · Published 16 Apr 2026 · Tags: File inclusion
- [Elementor Addons by Livemesh <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via piechart_settings Parameter](https://agentprime.io/advisories/CVE-2024-8858.md)
  `CVE-2024-8858` · CVE record: livemesh Livemesh Addons by Elementor · CVSS 6.4 Medium · Not analysed yet · Published 25 Sept 2024 · Tags: Cross-site scripting (XSS)
- [Elementor Addons by Livemesh <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Grid](https://agentprime.io/advisories/CVE-2024-3639.md)
  `CVE-2024-3639` · CVE record: livemesh Livemesh Addons by Elementor · CVSS 6.4 Medium · Not analysed yet · Published 4 Jul 2024 · Tags: Cross-site scripting (XSS)
- [Elementor Addons by Livemesh <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Various Widgets](https://agentprime.io/advisories/CVE-2024-2926.md)
  `CVE-2024-2926` · CVE record: livemesh Livemesh Addons by Elementor · CVSS 6.4 Medium · Not analysed yet · Published 4 Jul 2024 · Tags: Cross-site scripting (XSS)
- [Elementor Addons by Livemesh <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Marquee Text Widget, Testimonials Widget, and Testimonial Slider Widgets](https://agentprime.io/advisories/CVE-2024-3638.md)
  `CVE-2024-3638` · CVE record: livemesh Livemesh Addons by Elementor · CVSS 6.4 Medium · Not analysed yet · Published 4 Jul 2024 · Tags: Cross-site scripting (XSS)
- [Elementor Addons by Livemesh <= 8.4 - Authenticated (Contributor+) Limited Local File Inclusion via Widgets](https://agentprime.io/advisories/CVE-2024-2385.md)
  `CVE-2024-2385` · CVE record: livemesh Livemesh Addons by Elementor · CVSS 8.8 High · Not analysed yet · Published 4 Jul 2024 · Tags: Path traversal
- [Elementor Addons by Livemesh <= 8.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name](https://agentprime.io/advisories/CVE-2024-2655.md)
  `CVE-2024-2655` · CVE record: livemesh Livemesh Addons by Elementor · CVSS 6.4 Medium · Not analysed yet · Published 10 Apr 2024 · Tags: Cross-site scripting (XSS)
- [Elementor Addons by Livemesh <= 8.3.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget \_id attribute](https://agentprime.io/advisories/CVE-2024-2539.md)
  `CVE-2024-2539` · CVE record: livemesh Livemesh Addons by Elementor · CVSS 6.4 Medium · Not analysed yet · Published 10 Apr 2024 · Tags: Cross-site scripting (XSS)
- [Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Widget](https://agentprime.io/advisories/CVE-2024-1458.md)
  `CVE-2024-1458` · CVE record: livemesh Livemesh Addons by Elementor · CVSS 6.4 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: Cross-site scripting (XSS)
- [Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget](https://agentprime.io/advisories/CVE-2024-1461.md)
  `CVE-2024-1461` · CVE record: livemesh Livemesh Addons by Elementor · CVSS 6.4 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: Cross-site scripting (XSS)
- [Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Carousel Widget](https://agentprime.io/advisories/CVE-2024-1465.md)
  `CVE-2024-1465` · CVE record: livemesh Livemesh Addons by Elementor · CVSS 6.4 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: Cross-site scripting (XSS)
- [Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Slider Widget](https://agentprime.io/advisories/CVE-2024-1464.md)
  `CVE-2024-1464` · CVE record: livemesh Livemesh Addons by Elementor · CVSS 6.4 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: Cross-site scripting (XSS)
- [Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Multislider Widget](https://agentprime.io/advisories/CVE-2024-1466.md)
  `CVE-2024-1466` · CVE record: livemesh Livemesh Addons by Elementor · CVSS 6.4 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: Cross-site scripting (XSS)
- [Elementor Addons by Livemesh <= 8.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-1235.md)
  `CVE-2024-1235` · CVE record: livemesh Livemesh Addons by Elementor · CVSS 6.4 Medium · Not analysed yet · Published 20 Feb 2024 · Tags: Cross-site scripting (XSS)
- [Elementor Addons by Livemesh <= 8.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-0448.md)
  `CVE-2024-0448` · CVE record: livemesh Livemesh Addons by Elementor · CVSS 6.4 Medium · Not analysed yet · Published 5 Feb 2024 · Tags: Cross-site scripting (XSS)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=livemesh-addons-by-elementor>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/livemesh-addons-by-elementor/>. Everything for agents: <https://agentprime.io/llms.txt>.