Premium Addons For Elementor
Approved changes feed: RSS · Atom
cpe:2.3:a:leap13:premium_addons_for_elementor:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Leap13 (cd2fbc37-8c51-5ca2-b4af-3e1142efa0b9) |
|---|---|
| Product | Premium Addons For Elementor (5cfe755f-0a44-5d30-8c2a-88c27fc0c3bd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-68494 |
vulnerable | 2026-06-08 07:41:21.305824 |
WordPress Premium Addons for Elementor plugin <= 4.11.53 - Sensitive Data Exposure vulnerability
MEDIUM (5.3)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Premium Addons for Elementor: from n/a through <= 4.11.53.
Published: 2025-12-24T12:31:19.012Z
Updated: 2026-04-28T16:14:28.625Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4774 |
vulnerable | 2026-06-08 07:29:17.258960 |
Premium Addons for Elementor <= 4.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
MEDIUM (6.4)
The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-countdown attribute of Countdown widget in all versions up to, and including, 4.11.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2025-06-10T11:22:51.611Z
Updated: 2026-04-08T16:32:40.503Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14163 |
vulnerable | 2026-06-08 07:06:33.753192 |
Premium Addons for Elementor <= 4.11.53 - Cross-Site Request Forgery via 'insert_inner_template'
MEDIUM (4.3)
The Premium Addons for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.11.53. This is due to missing nonce validation in the 'insert_inner_template' function. This makes it possible for unauthenticated attackers to create arbitrary Elementor templates via a forged request granted they can trick a site administrator or other user with the edit_posts capability into performing an action such as clicking on a link.
Published: 2025-12-23T09:20:01.059Z
Updated: 2026-04-08T17:01:45.736Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14155 |
vulnerable | 2026-06-08 07:06:33.743933 |
Premium Addons for Elementor <= 4.11.53 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'get_template_content'
MEDIUM (5.3)
The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_template_content' function in all versions up to, and including, 4.11.53. This makes it possible for unauthenticated attackers to view the content of private, draft, and pending templates.
Published: 2025-12-23T09:19:59.928Z
Updated: 2026-04-08T16:36:38.336Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8681 |
vulnerable | 2026-06-08 07:00:25.382113 |
Premium Addons for Elementor <= 4.10.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Media Grid Widget
MEDIUM (6.4)
The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Media Grid widget in all versions up to, and including, 4.10.52 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2024-09-27T06:53:59.289Z
Updated: 2026-04-08T17:28:15.479Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6824 |
vulnerable | 2026-06-08 06:58:20.541236 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6495 |
vulnerable | 2026-06-08 06:58:19.597014 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6434 |
vulnerable | 2026-06-08 06:58:19.445301 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6340 |
vulnerable | 2026-06-08 06:58:18.666291 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5553 |
vulnerable | 2026-06-08 06:56:16.528681 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56225 |
vulnerable | 2026-06-08 06:54:17.570816 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4379 |
vulnerable | 2026-06-08 06:50:17.655664 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4378 |
vulnerable | 2026-06-08 06:50:17.655059 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4376 |
vulnerable | 2026-06-08 06:50:17.650788 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4205 |
vulnerable | 2026-06-08 06:50:17.223912 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4203 |
vulnerable | 2026-06-08 06:50:17.221535 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3885 |
vulnerable | 2026-06-08 06:43:51.750079 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3647 |
vulnerable | 2026-06-08 06:43:51.072578 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37922 |
vulnerable | 2026-06-08 06:39:48.246380 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32791 |
vulnerable | 2026-06-08 06:37:24.003748 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31278 |
vulnerable | 2026-06-08 06:35:31.222260 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2666 |
vulnerable | 2026-06-08 06:33:31.859129 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2665 |
vulnerable | 2026-06-08 06:33:31.858588 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2664 |
vulnerable | 2026-06-08 06:33:31.858068 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2399 |
vulnerable | 2026-06-08 06:33:31.021579 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-29106 |
vulnerable | 2026-06-08 06:33:28.748035 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24831 |
vulnerable | 2026-06-08 06:29:41.862400 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1680 |
vulnerable | 2026-06-08 06:27:14.070322 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1242 |
vulnerable | 2026-06-08 06:25:39.654673 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10266 |
vulnerable | 2026-06-08 06:22:03.878368 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0376 |
vulnerable | 2026-06-08 06:22:00.474063 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0326 |
vulnerable | 2026-06-08 06:22:00.344086 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-4445 |
vulnerable | 2026-06-08 05:38:09.460287 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24257 |
vulnerable | 2026-06-08 05:30:04.064220 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.