Advisories · Technology

Livemesh Addons by Elementor.

Every CVE that names Livemesh Addons by Elementor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-1572 CVE record

CVSS 6.4 Medium

Livemesh Addons by Elementor <= 9.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via Plugin Settings
- Livemesh Addons by Elementor
- Cross-site scripting (XSS)
Not analysed yet 16 Apr 2026
CVE-2026-1620 CVE record

CVSS 8.8 High

Livemesh Addons by Elementor <= 9.0 - Authenticated (Contributor+) Local File Inclusion via Widget Template Parameter
- Livemesh Addons by Elementor
- File inclusion
Not analysed yet 16 Apr 2026
CVE-2024-8858 CVE record

CVSS 6.4 Medium

Elementor Addons by Livemesh <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via piechart_settings Parameter
- Livemesh Addons by Elementor
- Cross-site scripting (XSS)
Not analysed yet 25 Sept 2024
CVE-2024-3639 CVE record

CVSS 6.4 Medium

Elementor Addons by Livemesh <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Grid
- Livemesh Addons by Elementor
- Cross-site scripting (XSS)
Not analysed yet 4 Jul 2024
CVE-2024-2926 CVE record

CVSS 6.4 Medium

Elementor Addons by Livemesh <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Various Widgets
- Livemesh Addons by Elementor
- Cross-site scripting (XSS)
Not analysed yet 4 Jul 2024
CVE-2024-3638 CVE record

CVSS 6.4 Medium

Elementor Addons by Livemesh <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Marquee Text Widget, Testimonials Widget, and Testimonial Slider Widgets
- Livemesh Addons by Elementor
- Cross-site scripting (XSS)
Not analysed yet 4 Jul 2024
CVE-2024-2385 CVE record

CVSS 8.8 High

Elementor Addons by Livemesh <= 8.4 - Authenticated (Contributor+) Limited Local File Inclusion via Widgets
- Livemesh Addons by Elementor
- Path traversal
Not analysed yet 4 Jul 2024
CVE-2024-2655 CVE record

CVSS 6.4 Medium

Elementor Addons by Livemesh <= 8.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name
- Livemesh Addons by Elementor
- Cross-site scripting (XSS)
Not analysed yet 10 Apr 2024
CVE-2024-2539 CVE record

CVSS 6.4 Medium

Elementor Addons by Livemesh <= 8.3.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget _id attribute
- Livemesh Addons by Elementor
- Cross-site scripting (XSS)
Not analysed yet 10 Apr 2024
CVE-2024-1458 CVE record

CVSS 6.4 Medium

Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Widget
- Livemesh Addons by Elementor
- Cross-site scripting (XSS)
Not analysed yet 9 Apr 2024
CVE-2024-1461 CVE record

CVSS 6.4 Medium

Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget
- Livemesh Addons by Elementor
- Cross-site scripting (XSS)
Not analysed yet 9 Apr 2024
CVE-2024-1465 CVE record

CVSS 6.4 Medium

Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Carousel Widget
- Livemesh Addons by Elementor
- Cross-site scripting (XSS)
Not analysed yet 9 Apr 2024
CVE-2024-1464 CVE record

CVSS 6.4 Medium

Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Slider Widget
- Livemesh Addons by Elementor
- Cross-site scripting (XSS)
Not analysed yet 9 Apr 2024
CVE-2024-1466 CVE record

CVSS 6.4 Medium

Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Multislider Widget
- Livemesh Addons by Elementor
- Cross-site scripting (XSS)
Not analysed yet 9 Apr 2024
CVE-2024-1235 CVE record

CVSS 6.4 Medium

Elementor Addons by Livemesh <= 8.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
- Livemesh Addons by Elementor
- Cross-site scripting (XSS)
Not analysed yet 20 Feb 2024
CVE-2024-0448 CVE record

CVSS 6.4 Medium

Elementor Addons by Livemesh <= 8.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- Livemesh Addons by Elementor
- Cross-site scripting (XSS)
Not analysed yet 5 Feb 2024