PatchTheCVEaddons for elementor vulnerabilities and fixes
Recent CVEs affecting addons for elementor, with upgrade or downgrade steps. 16 tracked.
Also searched as: addonsforelementor.
addons for elementor has 16 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 16. Most recent: 2024-09-25. Highest priority: CVE-2024-2385 (score 46/100).
- CVE-2024-8858 MEDIUM 6.4 UPGRADE The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pi
- CVE-2024-47303 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in livemesh
- CVE-2024-3639 MEDIUM 6.4 UPGRADE The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
- CVE-2024-3638 MEDIUM 6.4 UPGRADE The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
- CVE-2024-2926 MEDIUM 6.4 UPGRADE The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
- CVE-2024-2655 MEDIUM 6.4 UPGRADE The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
- CVE-2024-2539 MEDIUM 6.4 UPGRADE The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via widget
- CVE-2024-2385 HIGH 8.8 UPGRADE The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Local File Inclusion in all versions up
- CVE-2024-27986 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Livemesh
- CVE-2024-25598 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Livemesh
- CVE-2024-1466 MEDIUM 6.4 UPGRADE The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘sl
- CVE-2024-1465 MEDIUM 6.4 UPGRADE The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ca
- CVE-2024-1464 MEDIUM 6.4 UPGRADE The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘st
- CVE-2024-1461 MEDIUM 6.4 UPGRADE The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘st
- CVE-2024-1458 MEDIUM 6.4 UPGRADE The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘te
- CVE-2024-1235 MEDIUM 6.4 UPGRADE The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the cus
FAQ
How do I fix addons for elementor vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is addons for elementor being exploited right now?
None of the tracked addons for elementor CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which addons for elementor CVE should I patch first?
CVE-2024-2385 currently ranks highest (46/100): The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Local File Inclusion in all versions up.