Essential Addons For Elementor
Approved changes feed: RSS · Atom
cpe:2.3:a:wpdeveloper:essential_addons_for_elementor:*:*:*:*:lite:wordpress:*:*
part: a version: * update: *
| Vendor | Wpdeveloper (5e68162c-cdc3-57bc-b7a0-1ebc1941e1cb) |
|---|---|
| Product | Essential Addons For Elementor (bed2333a-cc3e-55c7-88fd-de08830bafaf) |
| Edition | * |
| Language | * |
| Software edition | lite |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wpdevelopers/essential-addons-for-elementor-lite |
purl2cpe | 2026-06-01 10:16:48.521255 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-6244 |
vulnerable | 2026-06-08 07:43:14.611642 |
Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Calendar` And `Business Reviews` Widgets
MEDIUM (6.4)
The Essential Addons for Elementor – Popular Elementor Templates and Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the via `Calendar` And `Business Reviews` Widgets attributes in all versions up to, and including, 6.1.19 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2025-07-08T01:43:46.743Z
Updated: 2026-04-08T17:04:24.577Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-69092 |
vulnerable | 2026-06-08 07:41:22.142817 |
WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows DOM-Based XSS.This issue affects Essential Addons for Elementor: from n/a through <= 6.5.3.
Published: 2025-12-30T10:47:58.488Z
Updated: 2026-04-28T20:42:17.147Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64352 |
vulnerable | 2026-06-08 07:39:18.414628 |
WordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerability
LOW (2.7)
Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Addons for Elementor: from n/a through <= 6.2.4.
Published: 2025-10-31T11:42:23.045Z
Updated: 2026-04-28T16:14:14.117Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-39590 |
vulnerable | 2026-06-08 07:23:06.815670 |
WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Stored XSS.This issue affects Essential Addons for Elementor: from n/a through <= 6.1.9.
Published: 2025-04-16T12:44:20.971Z
Updated: 2026-04-28T16:12:35.220Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-39589 |
vulnerable | 2026-06-08 07:23:06.815065 |
WordPress Essential Addons for Elementor plugin <= 6.1.9 - Sensitive Data Exposure Vulnerability
MEDIUM (4.3)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Retrieve Embedded Sensitive Data.This issue affects Essential Addons for Elementor: from n/a through <= 6.1.9.
Published: 2025-04-16T12:44:21.605Z
Updated: 2026-04-28T16:12:35.200Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24752 |
vulnerable | 2026-06-08 07:12:49.842932 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9994 |
vulnerable | 2026-06-08 07:00:29.023042 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9993 |
vulnerable | 2026-06-08 07:00:29.022738 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8979 |
vulnerable | 2026-06-08 07:00:26.266714 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8978 |
vulnerable | 2026-06-08 07:00:26.263830 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8961 |
vulnerable | 2026-06-08 07:00:26.231514 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5189 |
vulnerable | 2026-06-08 06:56:15.119275 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5073 |
vulnerable | 2026-06-08 06:56:14.776477 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56063 |
vulnerable | 2026-06-08 06:54:17.416864 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4624 |
vulnerable | 2026-06-08 06:50:18.300261 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4449 |
vulnerable | 2026-06-08 06:50:17.780204 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4448 |
vulnerable | 2026-06-08 06:50:17.779711 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4275 |
vulnerable | 2026-06-08 06:50:17.415667 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4156 |
vulnerable | 2026-06-08 06:50:17.121202 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4003 |
vulnerable | 2026-06-08 06:50:16.740706 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3733 |
vulnerable | 2026-06-08 06:43:51.334835 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3728 |
vulnerable | 2026-06-08 06:43:51.318960 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3645 |
vulnerable | 2026-06-08 06:43:51.059675 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3333 |
vulnerable | 2026-06-08 06:41:52.979265 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3018 |
vulnerable | 2026-06-08 06:41:52.220105 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39649 |
vulnerable | 2026-06-08 06:41:51.282279 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2974 |
vulnerable | 2026-06-08 06:35:27.879528 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2650 |
vulnerable | 2026-06-08 06:33:31.720263 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2623 |
vulnerable | 2026-06-08 06:33:31.660905 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1537 |
vulnerable | 2026-06-08 06:27:13.307542 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1536 |
vulnerable | 2026-06-08 06:27:13.306799 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1276 |
vulnerable | 2026-06-08 06:25:39.715959 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1236 |
vulnerable | 2026-06-08 06:25:39.635427 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1172 |
vulnerable | 2026-06-08 06:25:39.453172 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1171 |
vulnerable | 2026-06-08 06:25:39.451793 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41955 |
vulnerable | 2026-06-08 06:11:07.487728 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-4447 |
vulnerable | 2026-06-08 05:38:09.464352 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-4446 |
vulnerable | 2026-06-08 05:38:09.462700 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.