Approved changes feed: RSS · Atom

cpe:2.3:a:wpdeveloper:essential_addons_for_elementor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWpdeveloper (5e68162c-cdc3-57bc-b7a0-1ebc1941e1cb)
ProductEssential Addons For Elementor (bed2333a-cc3e-55c7-88fd-de08830bafaf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wpdevelopers/essential-addons-for-elementor-lite purl2cpe 2026-06-01 10:16:48.414125

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-25440 vulnerable 2026-07-29 00:34:56.836464 WordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerability
MEDIUM (5.3)
Unauthenticated Broken Access Control in Essential Addons for Elementor < 6.6.0 versions.
Published: 2026-06-15T20:17:32.855Z
Updated: 2026-06-16T14:54:00.518Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-23543 vulnerable 2026-06-08 07:51:15.585255 WordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Addons for Elementor: from n/a through <= 6.5.5.
Published: 2026-02-19T08:26:48.831Z
Updated: 2026-04-28T16:14:46.698Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-69092 vulnerable 2026-06-08 07:41:22.142074 WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows DOM-Based XSS.This issue affects Essential Addons for Elementor: from n/a through <= 6.5.3.
Published: 2025-12-30T10:47:58.488Z
Updated: 2026-04-28T20:42:17.147Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64352 vulnerable 2026-06-08 07:39:18.413388 WordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerability
LOW (2.7)
Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Addons for Elementor: from n/a through <= 6.2.4.
Published: 2025-10-31T11:42:23.045Z
Updated: 2026-04-28T16:14:14.117Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39590 vulnerable 2026-06-08 07:23:06.815544 WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Stored XSS.This issue affects Essential Addons for Elementor: from n/a through <= 6.1.9.
Published: 2025-04-16T12:44:20.971Z
Updated: 2026-04-28T16:12:35.220Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39589 vulnerable 2026-06-08 07:23:06.807105 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24752 vulnerable 2026-06-08 07:12:49.841673 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56063 vulnerable 2026-06-08 06:54:17.416191 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39649 vulnerable 2026-06-08 06:41:51.281209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41955 vulnerable 2026-06-08 06:11:07.483952 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32243 vulnerable 2026-06-08 06:04:45.241171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.