Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows DOM-Based XSS.This issue affects…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00154 · Published 2025-12-30 · No fix listed CWE-79
Priority LOW 13
Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential A…
CVSS 3.1LOW 2.7· Network · High privileges · No interaction · EPSS 0.00228 · Published 2025-10-31 · No fix listed CWE-862
Priority LOW 28
The Essential Addons for Elementor – Popular Elementor Templates and Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the via `Calendar` And `Business Reviews` Widgets attributes in all versi…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00198 · Published 2025-07-08 · No fix listed CWE-79
Priority LOW 28
The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the eael_event_details_text parameter of Ev…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00212 · Published 2025-06-07 · No fix listed CWE-79
Priority LOW 28
The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the eael_pricing_item_tooltip_content param…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00212 · Published 2025-06-07 · No fix listed CWE-79
Priority LOW 34
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Reflected XSS.This issue affects…
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.01233 · Published 2025-04-17 · No fix listed CWE-79
Priority LOW 20
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Retrieve Embedded Sensitive Data.This issu…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00424 · Published 2025-04-16 · No fix listed CWE-497
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Stored XSS.This issue affects Es…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00327 · Published 2025-04-16 · No fix listed CWE-79
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Stored XSS.This issue affects Es…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00255 · Published 2024-12-31 · No fix listed CWE-79
Priority LOW 26
The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.0.9…
CVSS 3.1MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.00491 · Published 2024-11-15 · No fix listed CWE-200
Priority LOW 37
The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.0.9…
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00525 · Published 2024-11-15 · No fix listed CWE-200
Priority LOW 28
The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘nomore_items_text’ parameter in all ve…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00322 · Published 2024-11-15 · No fix listed CWE-79
Priority MEDIUM 40
The Essential Addons for Elementor plugin for WordPress is vulnerable to privilege escalation in versions up to and including 4.6.4 due to a lack of restrictions on who can add a registration form and a custom registrati…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00461 · Published 2024-10-16 · No fix listed CWE-862
Priority LOW 28
The Essential Addons for Elementor plugin for WordPress is vulnerable to authorization bypass in versions up to and including 4.6.4 due to missing capability checks and nonce disclosure.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.00259 · Published 2024-10-16 · No fix listed CWE-862
Priority LOW 29
The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Filterable Gallery widget in a…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00373 · Published 2024-09-13 · No fix listed CWE-79
Priority LOW 29
The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Fancy Text widget in all versions up…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00385 · Published 2024-09-11 · No fix listed CWE-79
Priority LOW 29
The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘no_more_items_text’ parameter in all versions…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00438 · Published 2024-08-13 · No fix listed CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite.This issue affects Essential Addons for…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00295 · Published 2024-08-01 · No fix listed CWE-79
Priority LOW 29
The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘custom_js’ parameter in all versions up to, a…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00434 · Published 2024-06-11 · No fix listed CWE-79
Priority LOW 28
The Essential Addons for Elementor Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘eael_lightbox_open_btn_icon’ parameter within the Lightbox & Modal widget in all versions up to, and inclu…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00263 · Published 2024-06-07 · No fix listed CWE-79
Priority LOW 28
The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'get_manual_calendar_events' function in all v…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00322 · Published 2024-06-06 · No fix listed CWE-79
Priority LOW 28
The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Twitter Feed component in all versions up to,…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00329 · Published 2024-05-30 · No fix listed CWE-79
Priority LOW 28
The Essential Addons for Elementor PRO – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Team Member Carousel widget in al…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00263 · Published 2024-05-29 · No fix listed CWE-79
Priority MEDIUM 40
Improper Privilege Management vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation.This issue affects Essential Addons for Elementor: from n/a through 5.8.8.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00822 · Published 2024-05-17 · No fix listed CWE-269
Priority LOW 29
The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugins for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘eael_ext_toc_title_tag’ parameter in version…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00441 · Published 2024-05-14 · No fix listed CWE-79
Load more