# Wpdeveloper Essential Addons for Elementor


- [CVE-2023-32243](https://insights.sbomify.com/CVE-2023-32243/): WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation (critical 9.8)
- [CVE-2022-0320](https://insights.sbomify.com/CVE-2022-0320/): Essential Addons for Elementor < 5.0.5 - Unauthenticated LFI (critical 9.8)
- [CVE-2021-4447](https://insights.sbomify.com/CVE-2021-4447/): Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation (high 8.8)
- [CVE-2023-41955](https://insights.sbomify.com/CVE-2023-41955/): WordPress Essential Addons for Elementor plugin <= 5.8.8 - Contributor+ Privilege Escalation vulnerability (high 8.8)
- [CVE-2024-3018](https://insights.sbomify.com/CVE-2024-3018/): Essential Addons for Elementor <= 5.9.13 - Authenticated (Author+) PHP Object Injection via error_resetpassword (high 8.8)
- [CVE-2024-8979](https://insights.sbomify.com/CVE-2024-8979/): Information disclosure in Essential Addons for Elementor – Popular Elementor Templates & Widgets (high 8.0)
- [CVE-2024-1536](https://insights.sbomify.com/CVE-2024-1536/): Cross-site scripting in Essential Addons for Elementor – Popular Elementor Templates & Widgets (high 7.4)
- [CVE-2025-24752](https://insights.sbomify.com/CVE-2025-24752/): WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2023-32241](https://insights.sbomify.com/CVE-2023-32241/): WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2025-69092](https://insights.sbomify.com/CVE-2025-69092/): WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2025-39590](https://insights.sbomify.com/CVE-2025-39590/): WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) Vulnerability (medium 6.5)
- [CVE-2024-56063](https://insights.sbomify.com/CVE-2024-56063/): WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerability (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/products/wpdeveloper/essential-addons-for-elementor/