Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1020 CNY

100%

Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits, with AI-generated Chinese analysis, references, and POCs.

This page provides vulnerability aggregation data for the Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits product, focusing on common weakness types associated with this vendor. It collects a comprehensive range of security issues, including cross-site scripting, insecure direct object references, and improper access control flaws that have been disclosed or identified within the software ecosystem. The information presented covers security incidents and advisory releases from the past five years, ensuring a robust historical context for researchers and developers analyzing the product's security posture over time. By utilizing this centralized resource, users can effectively track a vendor's advisory history to understand the frequency and nature of past security incidents. It also allows individuals to delve deeper into specific weakness classes to comprehend the underlying technical causes and potential impact of these defects. Furthermore, the page serves as a detailed lookup tool for reviewing the entire vulnerability history of this specific product, enabling stakeholders to assess risk trends and evaluate the effectiveness of previous remediation efforts. This approach supports informed decision-making for security audits and compliance reviews without relying on fragmented or outdated sources. The content is structured to facilitate easy navigation through various categories of weaknesses, helping practitioners identify patterns and prioritize testing efforts for future development cycles or third-party integrations involving this plugin suite.

Vendor: litonice13

CVE IDTitleCVSSSeverityPublished
CVE-2026-2486 Master Addons For Elementor <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ma_el_bh_table_btn_text' CWE-79 6.4 Medium2026-02-20
CVE-2025-8874 Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox CWE-79 6.4 Medium2025-08-12
CVE-2025-5284 Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2025-07-16
CVE-2025-0433 Master Addons <= 2.0.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter CWE-79 6.4 Medium2025-03-04
CVE-2024-9618 Master Addons <= 2.0.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets CWE-79 6.4 Medium2025-03-04
CVE-2024-9502 Master Addons -- Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip Module CWE-79 6.4 Medium2025-01-07
CVE-2024-6282 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via data-jltma-wrapper-link Element CWE-79 5.4 Medium2024-09-10
CVE-2024-5382 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to MA Template Creation or Modification CWE-862 6.5 Medium2024-06-07
CVE-2024-5542 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via Navigation Menu Widget CWE-79 7.2 High2024-06-07
CVE-2024-3134 Master Addons for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2024-05-16
CVE-2024-4580 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2024-05-16
CVE-2024-4265 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.5.9 - Contributor+ Stored Cross-Site Scripting CWE-79 6.4 Medium2024-05-02
CVE-2024-2139 Master Addons for Elementor <= 2.0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget CWE-79 6.4 Medium2024-03-27

All 13 known CVE vulnerabilities affecting Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits with full Chinese analysis, references, and POCs where available.