Advisories · Technology

themelooks Enter Addons.

Every CVE that names themelooks Enter Addons among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-25014 CVE record

CVSS 4.3 Medium

WordPress Enter Addons plugin <= 2.3.2 - Cross Site Request Forgery (CSRF) vulnerability
- themelooks Enter Addons
- Cross-site request forgery (CSRF)
Not analysed yet 3 Feb 2026
CVE-2024-56252 CVE record

CVSS 6.5 Medium

WordPress Enter Addons plugin <= 2.1.9 - Cross Site Scripting (XSS) vulnerability
- themelooks Enter Addons
- Cross-site scripting (XSS)
Not analysed yet 2 Jan 2025
CVE-2024-47625 CVE record

CVSS 6.5 Medium

WordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability
- themelooks Enter Addons
- Cross-site scripting (XSS)
Not analysed yet 5 Oct 2024
CVE-2024-43225 CVE record

CVSS 6.5 Medium

WordPress Enter Addons plugin <= 2.1.7 - Cross Site Scripting (XSS) vulnerability
- ThemeLooks Enter Addons
- Cross-site scripting (XSS)
Not analysed yet 12 Aug 2024
CVE-2024-37263 CVE record

CVSS 6.5 Medium

WordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability
- ThemeLooks Enter Addons
- Cross-site scripting (XSS)
Not analysed yet 22 Jul 2024