en
As of 09/18/2026, within CyStack's analyzed data, Element Pack Pro has 0 security vulnerabilities published in the last 90 days. Of these, 0 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Element Pack Pro and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-40721WordPress Element Pack Pro plugin <= 9.0.6 - Local File Inclusion vulnerability | Exploitation statusNot known exploited | FixYes | Published06/17/2026 | SeverityHigh |
CVE-2025-46258WordPress Element Pack Pro Plugin < 8.0.0 - Broken Access Control vulnerability | Exploitation statusNot known exploited | FixYes | Published06/05/2025 | SeverityMedium |
CVE-2025-46257WordPress Element Pack Pro Plugin < 8.0.0 - Cross Site Request Forgery (CSRF) vulnerability | Exploitation statusNot known exploited | FixYes | Published06/05/2025 | SeverityMedium |
CVE-2024-33568WordPress Element Pack Pro plugin < 7.19.3 - Arbitrary File Read and Phar Deserialization vulnerability | Exploitation statusNot known exploited | FixYes | Published06/04/2024 | SeverityHigh |
