# wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets. Every CVE that names wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Essential Addons for Elementor <= 6.8.7 - Unauthenticated Privilege Escalation to 'page_id' Parameter via Elementor Revision](https://agentprime.io/advisories/CVE-2026-118205.md) `CVE-2026-118205` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 7.4 High · Not analysed yet · Published 30 Oct 2026 · Tags: Privilege escalation - [Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget](https://agentprime.io/advisories/CVE-2026-15145.md) `CVE-2026-15145` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reading Progress Global Color Settings](https://agentprime.io/advisories/CVE-2026-15156.md) `CVE-2026-15156` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor <= 6.6.10 - Authenticated (Contributor+) Account Takeover via Email Header Injection](https://agentprime.io/advisories/CVE-2026-15155.md) `CVE-2026-15155` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 8.8 High · Not analysed yet · Published 11 Jul 2026 · Tags: CWE-640 - [Essential Addons for Elementor <= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget Popup](https://agentprime.io/advisories/CVE-2026-6459.md) `CVE-2026-6459` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 8 Jul 2026 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler](https://agentprime.io/advisories/CVE-2026-7665.md) `CVE-2026-7665` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 5.3 Medium · Not analysed yet · Published 6 Jun 2026 · Tags: Broken access control - [Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_user](https://agentprime.io/advisories/CVE-2026-5193.md) `CVE-2026-5193` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.5 Medium · Not analysed yet · Published 14 May 2026 · Tags: Privilege escalation - [Essential Addons for Elementor <= 6.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Box Widget](https://agentprime.io/advisories/CVE-2026-1512.md) `CVE-2026-1512` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 14 Feb 2026 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor <= 6.5.5 - Missing Authorization to Unauthenticated Sensitive Information Exposure](https://agentprime.io/advisories/CVE-2026-1004.md) `CVE-2026-1004` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 5.3 Medium · Not analysed yet · Published 16 Jan 2026 · Tags: Broken access control - [Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-13977.md) `CVE-2025-13977` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 17 Dec 2025 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items'](https://agentprime.io/advisories/CVE-2025-8451.md) `CVE-2025-8451` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 15 Aug 2025 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via \`Calendar\` And \`Business Reviews\` Widgets](https://agentprime.io/advisories/CVE-2025-6244.md) `CVE-2025-6244` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: Cross-site scripting (XSS) - [Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library](https://agentprime.io/advisories/CVE-2024-5647.md) `CVE-2024-5647` · CVE record: blossomthemes BlossomThemes Social Feed and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 3 Jul 2025 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widget](https://agentprime.io/advisories/CVE-2024-9993.md) `CVE-2024-9993` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 7 Jun 2025 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widget](https://agentprime.io/advisories/CVE-2024-9994.md) `CVE-2024-9994` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 7 Jun 2025 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure](https://agentprime.io/advisories/CVE-2024-8978.md) `CVE-2024-8978` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 5.7 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: Information disclosure - [Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation](https://agentprime.io/advisories/CVE-2024-8979.md) `CVE-2024-8979` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 8.0 High · Not analysed yet · Published 15 Nov 2024 · Tags: Information disclosure - [Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-8961.md) `CVE-2024-8961` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation](https://agentprime.io/advisories/CVE-2021-4447.md) `CVE-2021-4447` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 8.8 High · Not analysed yet · Published 16 Oct 2024 · Tags: Broken access control - [Essential Addons for Elementor <= 4.6.4 - Missing Authorization](https://agentprime.io/advisories/CVE-2021-4446.md) `CVE-2021-4446` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.3 Medium · Not analysed yet · Published 16 Oct 2024 · Tags: Broken access control - [Essential Addons for Elementor <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery Widget](https://agentprime.io/advisories/CVE-2024-8742.md) `CVE-2024-8742` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 13 Sept 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget](https://agentprime.io/advisories/CVE-2024-8440.md) `CVE-2024-8440` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 11 Sept 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via no_more_items_text Parameter](https://agentprime.io/advisories/CVE-2024-7092.md) `CVE-2024-7092` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 13 Aug 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.23 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-5189.md) `CVE-2024-5189` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 11 Jun 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.22 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-5188.md) `CVE-2024-5188` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 6 Jun 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor <= 5.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Feed](https://agentprime.io/advisories/CVE-2024-5073.md) `CVE-2024-5073` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 30 May 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.20 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-4624.md) `CVE-2024-4624` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 14 May 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Interactive Circles'](https://agentprime.io/advisories/CVE-2024-4275.md) `CVE-2024-4275` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 10 May 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor <= 5.9.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Several Widgets](https://agentprime.io/advisories/CVE-2024-4449.md) `CVE-2024-4449` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 10 May 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Dual Color Header', 'Event Ca…](https://agentprime.io/advisories/CVE-2024-4448.md) `CVE-2024-4448` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 10 May 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery & Interacti…](https://agentprime.io/advisories/CVE-2024-3728.md) `CVE-2024-3728` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 2 May 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.17 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-4156.md) `CVE-2024-4156` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 2 May 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-4003.md) `CVE-2024-4003` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 2 May 2024 · Tags: CWE-20 - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Information Exposure](https://agentprime.io/advisories/CVE-2024-3733.md) `CVE-2024-3733` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 5.3 Medium · Not analysed yet · Published 25 Apr 2024 · Tags: Information disclosure - [Essential Addons for Elementor <= 5.9.14 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget URL Attribute](https://agentprime.io/advisories/CVE-2024-3333.md) `CVE-2024-3333` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 17 Apr 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-2623.md) `CVE-2024-2623` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.13 - Unauthenticated Sensitive Information Exposure](https://agentprime.io/advisories/CVE-2024-2974.md) `CVE-2024-2974` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 5.3 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: Information disclosure - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-2650.md) `CVE-2024-2650` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-20 - [Essential Addons for Elementor <= 5.9.13 - Authenticated (Author+) PHP Object Injection via error_resetpassword](https://agentprime.io/advisories/CVE-2024-3018.md) `CVE-2024-3018` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 8.8 High · Not analysed yet · Published 30 Mar 2024 · Tags: Insecure deserialization - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table](https://agentprime.io/advisories/CVE-2024-1537.md) `CVE-2024-1537` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 13 Mar 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar](https://agentprime.io/advisories/CVE-2024-1536.md) `CVE-2024-1536` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 7.4 High · Not analysed yet · Published 13 Mar 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery](https://agentprime.io/advisories/CVE-2024-1171.md) `CVE-2024-1171` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 5.4 Medium · Not analysed yet · Published 20 Feb 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion](https://agentprime.io/advisories/CVE-2024-1172.md) `CVE-2024-1172` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 5.4 Medium · Not analysed yet · Published 20 Feb 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-1276.md) `CVE-2024-1276` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 20 Feb 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-1236.md) `CVE-2024-1236` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 20 Feb 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scritping](https://agentprime.io/advisories/CVE-2024-0586.md) `CVE-2024-0586` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 5 Feb 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-0954.md) `CVE-2024-0954` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 5 Feb 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image URl](https://agentprime.io/advisories/CVE-2024-0585.md) `CVE-2024-0585` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 5.4 Medium · Not analysed yet · Published 5 Feb 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2023-7044.md) `CVE-2023-7044` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 6.4 Medium · Not analysed yet · Published 4 Jan 2024 · Tags: Cross-site scripting (XSS) - [Essential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure](https://agentprime.io/advisories/CVE-2023-3779.md) `CVE-2023-3779` · CVE record: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets · CVSS 5.3 Medium · Not analysed yet · Published 20 Jul 2023 · Tags: Information disclosure ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .