Advisories · Technology

WPDeveloper Essential Addons for Elementor.

Every CVE that names WPDeveloper Essential Addons for Elementor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-110898 CVE record

CVSS 6.4 Medium

WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability
- WPDeveloper Essential Addons for Elementor
- Privilege escalation
Not analysed yet 19 Oct 2026
CVE-2026-102394 CVE record

CVSS 6.5 Medium

WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability
- WPDeveloper Essential Addons for Elementor
- Cross-site scripting (XSS)
Not analysed yet 1 Oct 2026
CVE-2026-81777 CVE record

CVSS 5.3 Medium

WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability
- WPDeveloper Essential Addons for Elementor
- Authentication bypass
Not analysed yet 28 Aug 2026
CVE-2026-25440 CVE record

CVSS 5.3 Medium

WordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerability
- WPDeveloper Essential Addons for Elementor
- Broken access control
Not analysed yet 15 Jun 2026
CVE-2026-23543 CVE record

CVSS 5.3 Medium

WordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerability
- WPDeveloper Essential Addons for Elementor
- Broken access control
Not analysed yet 19 Feb 2026
CVE-2025-69092 CVE record

CVSS 6.5 Medium

WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability
- WPDeveloper Essential Addons for Elementor
- Cross-site scripting (XSS)
Not analysed yet 30 Dec 2025
CVE-2025-64352 CVE record

CVSS 2.7 Low

WordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerability
- WPDeveloper Essential Addons for Elementor
- Broken access control
Not analysed yet 31 Oct 2025
CVE-2025-24752 CVE record

CVSS 7.1 High

WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability
- WPDeveloper Essential Addons for Elementor
- Cross-site scripting (XSS)
Not analysed yet 17 Apr 2025
CVE-2025-39589 CVE record

CVSS 4.3 Medium

WordPress Essential Addons for Elementor plugin <= 6.1.9 - Sensitive Data Exposure Vulnerability
- WPDeveloper Essential Addons for Elementor
- Information disclosure
Not analysed yet 16 Apr 2025
CVE-2025-39590 CVE record

CVSS 6.5 Medium

WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) Vulnerability
- WPDeveloper Essential Addons for Elementor
- Cross-site scripting (XSS)
Not analysed yet 16 Apr 2025
CVE-2024-56063 CVE record

CVSS 6.5 Medium

WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerability
- WPDeveloper Essential Addons for Elementor
- Cross-site scripting (XSS)
Not analysed yet 31 Dec 2024
CVE-2024-39649 CVE record

CVSS 6.5 Medium

WordPress Essential Addons for Elementor plugin <= 5.9.26 - Cross Site Scripting (XSS) vulnerability
- WPDeveloper Essential Addons for Elementor
- Cross-site scripting (XSS)
Not analysed yet 1 Aug 2024
CVE-2023-41955 CVE record

CVSS 8.8 High

WordPress Essential Addons for Elementor plugin <= 5.8.8 - Contributor+ Privilege Escalation vulnerability
- WPDeveloper Essential Addons for Elementor
- Privilege escalation
Not analysed yet 17 May 2024
CVE-2023-32243 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation
- WPDeveloper Essential Addons for Elementor
- Authentication bypass
Not analysed yet 12 May 2023