Approved changes feed: RSS · Atom

cpe:2.3:a:wpdeveloper:essential_addons_for_elementor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWpdeveloper (5e68162c-cdc3-57bc-b7a0-1ebc1941e1cb)
ProductEssential Addons For Elementor (bed2333a-cc3e-55c7-88fd-de08830bafaf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wpdevelopers/essential-addons-for-elementor-lite purl2cpe 2026-06-01 10:16:48.414125

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-23543 vulnerable 2026-06-03 15:16:49.939458 WordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Addons for Elementor: from n/a through <= 6.5.5.
Published: 2026-02-19T08:26:48.831Z
Updated: 2026-04-28T16:14:46.698Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-69092 vulnerable 2026-06-03 15:11:04.528528 WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows DOM-Based XSS.This issue affects Essential Addons for Elementor: from n/a through <= 6.5.3.
Published: 2025-12-30T10:47:58.488Z
Updated: 2026-04-28T20:42:17.147Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64352 vulnerable 2026-06-03 15:09:37.790875 WordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerability
LOW (2.7)
Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Addons for Elementor: from n/a through <= 6.2.4.
Published: 2025-10-31T11:42:23.045Z
Updated: 2026-04-28T16:14:14.117Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39590 vulnerable 2026-06-03 15:01:02.704969 WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Stored XSS.This issue affects Essential Addons for Elementor: from n/a through <= 6.1.9.
Published: 2025-04-16T12:44:20.971Z
Updated: 2026-04-28T16:12:35.220Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39589 vulnerable 2026-06-03 15:01:02.703713 WordPress Essential Addons for Elementor plugin <= 6.1.9 - Sensitive Data Exposure Vulnerability
MEDIUM (4.3)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Retrieve Embedded Sensitive Data.This issue affects Essential Addons for Elementor: from n/a through <= 6.1.9.
Published: 2025-04-16T12:44:21.605Z
Updated: 2026-04-28T16:12:35.200Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24752 vulnerable 2026-06-03 14:59:56.815812 WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Reflected XSS.This issue affects Essential Addons for Elementor: from n/a through <= 6.0.14.
Published: 2025-04-17T15:48:11.325Z
Updated: 2026-04-28T16:11:33.944Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56063 vulnerable 2026-06-03 14:57:42.503905 WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Stored XSS.This issue affects Essential Addons for Elementor: from n/a through <= 6.0.7.
Published: 2024-12-31T23:06:31.011Z
Updated: 2026-04-28T16:10:54.741Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39649 vulnerable 2026-06-03 14:56:22.103072 WordPress Essential Addons for Elementor plugin <= 5.9.26 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite.This issue affects Essential Addons for Elementor: from n/a through <= 5.9.26.
Published: 2024-08-01T21:54:55.551Z
Updated: 2026-04-28T16:10:07.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41955 vulnerable 2026-06-03 14:52:52.805132 WordPress Essential Addons for Elementor plugin <= 5.8.8 - Contributor+ Privilege Escalation vulnerability
HIGH (8.8)
Improper Privilege Management vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation.This issue affects Essential Addons for Elementor: from n/a through 5.8.8.
Published: 2024-05-17T06:55:35.414Z
Updated: 2026-04-28T16:08:39.415Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32243 vulnerable 2026-06-03 14:51:57.924703 WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation
CRITICAL (9.8)
Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This issue affects Essential Addons for Elementor: from 5.4.0 through 5.7.1.
Published: 2023-05-12T07:23:22.657Z
Updated: 2026-04-28T16:08:22.366Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.