Exclusive Addons — Vulnerabilities & Security Advisories 4

Exclusive Addons is a WordPress plugin providing premium extensions for Elementor, enabling users to enhance website design with custom widgets and templates. Historically, the plugin has been vulnerable to multiple security issues, including cross-site scripting (XSS), remote code execution (RCE), and privilege escalation vulnerabilities. These weaknesses often stem from insufficient input validation and improper access controls. The plugin has accumulated four CVEs to date, with some vulnerabilities allowing unauthenticated attackers to execute arbitrary code or compromise sensitive data. Security researchers have noted that the plugin's frequent updates sometimes introduce new flaws while attempting to patch existing ones, making it a persistent target for exploitation.