- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, Element Pack Elementor Addons recorded 5 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Element Pack Elementor Addons and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-119501WordPress Element Pack Elementor Addons plugin <= 10.0.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-108478WordPress Element Pack Elementor Addons plugin <= 8.8.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-105873WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-105871WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-66574WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-119501WordPress Element Pack Elementor Addons plugin <= 10.0.2 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes |
| SeverityMedium |
CVE-2026-108478WordPress Element Pack Elementor Addons plugin <= 8.8.8 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published10/12/2026 | SeverityMedium |
|---|
CVE-2026-105873WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published10/07/2026 | SeverityMedium |
|---|
CVE-2026-105871WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published10/07/2026 | SeverityMedium |
|---|
CVE-2026-66574WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published09/17/2026 | SeverityMedium |
|---|
CVE-2026-65502WordPress Element Pack Elementor Addons plugin <= 8.7.13 - Captcha Bypass vulnerability | Exploitation statusNot exploited | FixYes | Published08/06/2026 | SeverityMedium |
|---|
CVE-2026-40745WordPress Element Pack Elementor Addons plugin <= 8.4.2 - SQL Injection vulnerability | Exploitation statusNot exploited | FixYes | Published04/15/2026 | SeverityHigh |
|---|
CVE-2025-31413WordPress Element Pack Elementor Addons plugin <= 8.3.13 - Cross Site Request Forgery (CSRF) vulnerability | Exploitation statusNot exploited | FixYes | Published01/22/2026 | SeverityMedium |
|---|
CVE-2024-47392WordPress Element Pack Elementor Addons plugin <= 5.7.5 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published10/05/2024 | SeverityMedium |
|---|
CVE-2024-39667WordPress Element Pack Elementor Addons plugin <= 5.6.11 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published08/01/2024 | SeverityMedium |
|---|
CVE-2024-32572WordPress Element Pack Elementor Addons plugin <= 5.6.0 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published04/18/2024 | SeverityMedium |
|---|
CVE-2024-30496WordPress Element Pack Lite plugin <= 5.5.3 - SQL Injection vulnerability | Exploitation statusNot exploited | FixYes | Published03/29/2024 | SeverityHigh |
|---|
CVE-2024-30185WordPress Element Pack Elementor Addons plugin <= 5.5.3 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published03/27/2024 | SeverityMedium |
|---|
CVE-2024-24840WordPress Element Pack Elementor Addons plugin <= 5.4.11 - Broken Access Control on Duplicate Post vulnerability | Exploitation statusNot exploited | FixYes | Published03/23/2024 | SeverityMedium |
|---|
14 Results | Page 1 of 1