Essential Addons — Vulnerabilities & Security Advisories 3

Essential Addons is a WordPress plugin suite providing design elements and templates for website builders. Historically, it has been susceptible to multiple cross-site scripting (XSS) vulnerabilities and remote code execution (RCE) flaws, often due to insufficient input sanitization and improper file handling. The plugin has accumulated three CVE records, with RCE being the most critical class. Security researchers have identified consistent patterns of inadequate access controls and insufficient security checks in its components. While no major public incidents have been widely documented, the recurring nature of these vulnerabilities suggests ongoing security challenges that require careful implementation and regular updates by users.