Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Exclusive Addons for Elementor — Vulnerabilities & Security Advisories 19

All 19 CVE vulnerabilities found in Exclusive Addons for Elementor, with AI-generated Chinese analysis, references, and POCs.

This page documents security vulnerabilities affecting Exclusive Addons for Elementor, a popular third-party addon suite for the WordPress page builder plugin. It serves as a centralized repository for tracking known weaknesses associated with this specific vendor and product combination, categorized under standard weakness classifications. The content on this page aggregates vulnerability data collected over the past five years, covering all reported security incidents from early 2019 to the present. This timeline includes critical zero-day exploits, information disclosure flaws, cross-site scripting issues, and unauthorized access vulnerabilities that were publicly disclosed by security researchers, automated scanners, or the vendor itself. The collection focuses exclusively on issues that have a confirmed impact on the Exclusive Addons for Elementor plugin, filtering out general WordPress core vulnerabilities or unrelated software bugs. Visitors to this page can track the vendor’s history of security advisories to assess their responsiveness and remediation practices. Users can also understand the severity and technical nature of specific weakness classes by examining detailed descriptions and proof-of-concept evidence where available. Additionally, administrators and developers can look up a product’s vulnerability history to evaluate the risk profile before installation or update, ensuring they are aware of any persistent or recurring security issues. This resource aims to provide transparency and facilitate informed decision-making regarding the deployment of this popular WordPress extension in production environments.

Vendor: DevsCred

CVE IDTitleCVSSSeverityPublished
CVE-2026-11328 Exclusive Addons for Elementor <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title CWE-79 6.4 Medium2026-07-07
CVE-2025-7498 Exclusive Addons for Elementor <= 2.7.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown CWE-79 6.4 Medium2025-08-06
CVE-2025-4783 Exclusive Addons for Elementor <= 2.7.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget CWE-79 6.4 Medium2025-05-26
CVE-2025-1571 Exclusive Addons for Elementor <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Image Comparison Widgets CWE-79 6.4 Medium2025-02-28
CVE-2024-10312 Exclusive Addons for Elementor <= 2.7.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates CWE-200 4.3 Medium2024-10-29
CVE-2024-5332 Exclusive Addons for Elementor <= 2.6.9.8 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Card Widget CWE-79 6.4 Medium2024-06-26
CVE-2024-4618 Exclusive Addons for Elementor <= 2.6.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget CWE-79 6.4 Medium2024-05-15
CVE-2024-2751 Exclusive Addons for Elementor <= 2.6.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via InfoBox CWE-20 6.4 Medium2024-05-02
CVE-2024-3489 Exclusive Addons for Elementor <= 2.6.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Expired Title CWE-79 6.4 Medium2024-05-02
CVE-2024-2750 Exclusive Addons for Elementor <= 2.6.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget CWE-87 6.4 Medium2024-05-02
CVE-2024-2503 Exclusive Addons for Elementor <= 2.6.9.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Post Grid CWE-79 6.4 Medium2024-05-02
CVE-2024-3985 Exclusive Addons for Elementor <= 2.6.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call to Action CWE-79 6.4 Medium2024-05-02
CVE-2024-1413 Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget CWE-79 6.4 Medium2024-03-13
CVE-2024-2028 Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Covid-19 Stats Widget CWE-79 6.4 Medium2024-03-13
CVE-2024-1414 Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call To Action Widget CWE-79 6.4 Medium2024-03-13
CVE-2024-1234 Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2024-03-13
CVE-2024-0823 Exclusive Addons for Elementor <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 5.4 Medium2024-02-05
CVE-2024-0824 Exclusive Addons for Elementor <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Anything CWE-79 6.4 Medium2024-01-27
CVE-2022-45067 WordPress Exclusive Addons Elementor Plugin <= 2.6.1 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 4.3 Medium2023-02-02

All 19 known CVE vulnerabilities affecting Exclusive Addons for Elementor with full Chinese analysis, references, and POCs where available.