premium addons for elementor vulnerabilities and fixes

Recent CVEs affecting premium addons for elementor, with upgrade or downgrade steps. 33 tracked.

Also searched as: premiumaddonsforelementor.

premium addons for elementor has 33 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 33. Most recent: 2025-12-24. Highest priority: CVE-2025-14155 (score 37/100).

• CVE-2025-14155 MEDIUM 5.3 UPGRADE The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable t
• CVE-2025-14163 MEDIUM 4.3 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versi
• CVE-2025-68494 MEDIUM 5.3 UPGRADE Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 Premium Add
• CVE-2025-4774 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the dat
• CVE-2024-8681 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-6824 MEDIUM 4.3 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification and loss of d
• CVE-2024-6495 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-6434 LOW 3.1 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Regular Expression Denial of Service (R
• CVE-2024-6340 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-5553 MEDIUM 4.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting v
• CVE-2024-56225 MEDIUM 5.4 UPGRADE Missing Authorization vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows
• CVE-2024-4379 MEDIUM 5.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-4378 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-4376 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-4205 MEDIUM 4.3 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a mi
• CVE-2024-4203 MEDIUM 5.4 UPGRADE The Premium Addons Pro for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the
• CVE-2024-3885 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sub
• CVE-2024-3647 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-37922 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 P
• CVE-2024-32791 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 P
• CVE-2024-31278 MEDIUM 4.3 UPGRADE Insertion of Sensitive Information Into Sent Data vulnerability in Leap13 Premium Addons for Elementor premium
• CVE-2024-2666 MEDIUM 5.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting v
• CVE-2024-2665 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-2664 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-2399 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-29106 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 P
• CVE-2024-24831 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 P
• CVE-2024-1680 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Ima
• CVE-2024-1242 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the but
• CVE-2024-10266 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-0376 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-0326 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2021-4445 MEDIUM 6.5 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Arbitrary Option Updates in versions up

FAQ

How do I fix premium addons for elementor vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is premium addons for elementor being exploited right now?

None of the tracked premium addons for elementor CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which premium addons for elementor CVE should I patch first?

CVE-2025-14155 currently ranks highest (37/100): The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable t.

RSS feed for premium addons for elementor · ← Back to latest CVEs