leap13 vulnerabilities

Recent CVEs affecting leap13 products. 29 tracked.

leap13 has 29 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 29. Most recent: 2025-12-24. Highest priority: CVE-2025-14155 (score 37/100).

• CVE-2025-14155 MEDIUM 5.3 UPGRADE The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable t
• CVE-2025-14163 MEDIUM 4.3 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versi
• CVE-2025-68494 MEDIUM 5.3 UPGRADE Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 Premium Add
• CVE-2025-4774 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the dat
• CVE-2024-8681 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-6824 MEDIUM 4.3 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification and loss of d
• CVE-2024-6495 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-6434 LOW 3.1 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Regular Expression Denial of Service (R
• CVE-2024-6340 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-5553 MEDIUM 4.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting v
• CVE-2024-56225 MEDIUM 5.4 UPGRADE Missing Authorization vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows
• CVE-2024-4379 MEDIUM 5.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-4378 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-4376 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-4205 MEDIUM 4.3 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a mi
• CVE-2024-4203 MEDIUM 5.4 UPGRADE The Premium Addons Pro for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the
• CVE-2024-3885 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sub
• CVE-2024-3647 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-37922 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 P
• CVE-2024-37519 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 P
• CVE-2024-32791 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 P
• CVE-2024-31278 MEDIUM 4.3 UPGRADE Insertion of Sensitive Information Into Sent Data vulnerability in Leap13 Premium Addons for Elementor premium
• CVE-2024-2666 MEDIUM 5.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting v
• CVE-2024-2665 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-2664 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-10266 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2024-0376 MEDIUM 6.4 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
• CVE-2023-37869 MEDIUM 6.5 UPGRADE Missing Authorization vulnerability in Premium Addons Premium Addons PRO.This issue affects Premium Addons PRO
• CVE-2021-4445 MEDIUM 6.5 UPGRADE The Premium Addons for Elementor plugin for WordPress is vulnerable to Arbitrary Option Updates in versions up

FAQ

How do I fix leap13 vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is leap13 being exploited right now?

None of the tracked leap13 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which leap13 CVE should I patch first?

CVE-2025-14155 currently ranks highest (37/100): The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable t.

Products

• premium addons
• premium addons for elementor
• premium blocks for gutenburg

RSS feed for leap13 · ← Back to latest CVEs