PatchTheCVEelement pack vulnerabilities and fixes
Recent CVEs affecting element pack, with upgrade or downgrade steps. 13 tracked.
Also searched as: elementpack.
element pack has 13 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 13. Most recent: 2025-08-06. Highest priority: CVE-2025-8100 (score 42/100).
- CVE-2025-8100 MEDIUM 5.4 UPGRADE The Element Pack Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Script
- CVE-2025-5944 MEDIUM 6.4 UPGRADE The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th
- CVE-2025-1458 MEDIUM 6.4 UPGRADE The Element Pack Addons for Elementor – Free Templates and Widgets for Your WordPress Websites plugin for Word
- CVE-2024-9868 MEDIUM 5.4 UPGRADE The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) pl
- CVE-2024-9867 MEDIUM 5.4 UPGRADE The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) pl
- CVE-2024-9657 MEDIUM 6.5 UPGRADE The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) pl
- CVE-2024-9058 MEDIUM 6.4 UPGRADE The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) pl
- CVE-2024-47392 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bdthemes
- CVE-2024-12851 MEDIUM 6.4 UPGRADE The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows)
- CVE-2024-11852 MEDIUM 4.3 UPGRADE The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows)
- CVE-2024-10980 MEDIUM 5.4 UPGRADE The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows)
- CVE-2024-10493 MEDIUM 5.4 UPGRADE The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) Wo
- CVE-2024-10310 MEDIUM 6.4 UPGRADE The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) pl
FAQ
How do I fix element pack vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is element pack being exploited right now?
None of the tracked element pack CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which element pack CVE should I patch first?
CVE-2025-8100 currently ranks highest (42/100): The Element Pack Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Script.