wpdeveloper vulnerabilities

Recent CVEs affecting wpdeveloper products. 37 tracked.

wpdeveloper has 37 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 37. Most recent: 2025-12-30. Highest priority: CVE-2025-24752 (score 42/100).

• CVE-2023-2085 MEDIUM 4.3 UPGRADE The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing
• CVE-2025-69092 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDevelo
• CVE-2025-6244 MEDIUM 6.4 UPGRADE The Essential Addons for Elementor – Popular Elementor Templates and Widgets plugin for WordPress is vulnerabl
• CVE-2025-64352 LOW 2.7 UPGRADE Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-element
• CVE-2025-39590 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDevelo
• CVE-2025-39589 MEDIUM 4.3 UPGRADE Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper Essent
• CVE-2025-26871 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Expl
• CVE-2025-24752 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDevelo
• CVE-2025-22683 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDevelo
• CVE-2025-22315 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDevelo
• CVE-2025-1664 MEDIUM 6.4 UPGRADE The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable
• CVE-2024-9994 MEDIUM 6.4 UPGRADE The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plu
• CVE-2024-9993 MEDIUM 6.4 UPGRADE The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plu
• CVE-2024-8979 HIGH 8.0 UPGRADE The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plu
• CVE-2024-8978 MEDIUM 5.7 UPGRADE The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plu
• CVE-2024-8961 MEDIUM 6.4 UPGRADE The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plu
• CVE-2024-8742 MEDIUM 6.4 UPGRADE The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plu
• CVE-2024-8440 MEDIUM 6.4 UPGRADE The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for
• CVE-2024-56063 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDevelo
• CVE-2024-51672 HIGH 7.6 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPDevelo
• CVE-2024-50461 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDevelo
• CVE-2024-47385 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDevelo
• CVE-2024-43936 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in W
• CVE-2024-43323 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in ReviewX ReviewX allows Exploiting Incorrectly Configured Access Control
• CVE-2024-38707 MEDIUM 6.3 UPGRADE Missing Authorization vulnerability in WPDeveloper EmbedPress allows Exploiting Incorrectly Configured Access
• CVE-2024-13803 MEDIUM 6.4 UPGRADE The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable
• CVE-2024-12045 MEDIUM 4.4 UPGRADE The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable
• CVE-2024-11203 MEDIUM 6.4 UPGRADE The EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Goo
• CVE-2023-51360 MEDIUM 6.5 UPGRADE Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Expl
• CVE-2023-51359 MEDIUM 5.4 UPGRADE Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Expl
• CVE-2023-47762 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in WPDeveloper BetterDocs betterdocs allows Exploiting Incorrectly Configu
• CVE-2023-47760 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Expl
• CVE-2023-45104 HIGH 7.3 UPGRADE Missing Authorization vulnerability in WPDeveloper BetterLinks betterlinks allows Exploiting Incorrectly Confi
• CVE-2023-40670 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in ReviewX Team ReviewX allows Exploiting Incorrectly Configured Access Co
• CVE-2022-47594 MEDIUM 6.5 UPGRADE Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectl
• CVE-2021-4447 HIGH 8.8 UPGRADE The Essential Addons for Elementor plugin for WordPress is vulnerable to privilege escalation in versions up
• CVE-2021-4446 MEDIUM 6.3 UPGRADE The Essential Addons for Elementor plugin for WordPress is vulnerable to authorization bypass in versions up t

FAQ

How do I fix wpdeveloper vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is wpdeveloper being exploited right now?

None of the tracked wpdeveloper CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which wpdeveloper CVE should I patch first?

CVE-2025-24752 currently ranks highest (42/100): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDevelo.

Products

• betterdocs
• betterlinks
• embedpress
• essential addons for elementor
• essential blocks
• notificationx
• reviewx
• typing text

RSS feed for wpdeveloper · ← Back to latest CVEs