Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

nicheaddons Vulnerabilities & CVE List (Oct 2026) | CyStack

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2024-13362`Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter	Exploitation statusNot exploited	FixYes	Affected productRestaurant & Cafe Addon for Elementor	Published05/01/2026	SeverityMedium
`CVE-2025-8150`Events Addon for Elementor <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter and Countdown Widgets	Exploitation statusNot exploited	FixYes	Affected productEvents Addon for Elementor
`CVE-2025-8212`Medical Addon for Elementor <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter Widget	Exploitation statusNot exploited	FixYes	Affected productMedical Addon for Elementor
`CVE-2024-13854`Education Addon for Elementor <= 1.3.1 - Authenticated (Contributor+) Insecure Direct Object Reference via naedu_elementor_template Shortcode	Exploitation statusNot exploited	FixYes	Affected productEducation Addon for Elementor
`CVE-2024-12046`Medical Addon for Elementor <= 1.6.2 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode	Exploitation statusNot exploited	FixYes	Affected productMedical Addon for Elementor
`CVE-2024-12061`Events Addon for Elementor <= 2.2.3 - Authenticated (Contributor+) Post Disclosure	Exploitation statusNot exploited	FixYes	Affected productEvents Addon for Elementor	Published
`CVE-2024-54316`WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.8 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot exploited	FixYes	Affected productRestaurant & Cafe Addon for Elementor
`CVE-2024-54315`WordPress Events Addon for Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot exploited	FixYes	Affected productEvents Addon for Elementor	Published
`CVE-2024-54314`WordPress Primary Addon for Elementor plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot exploited	FixYes	Affected productPrimary Addon for Elementor
`CVE-2023-47826`WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.3 - Broken Access Control vulnerability	Exploitation statusNot exploited	FixYes	Affected productRestaurant & Cafe Addon for Elementor

26 Results | Page 1 of 3

Security vulnerabilities from nicheaddons

nicheaddons

Filters

Run an in-depth assessment with complete web risk management

Popular nicheaddons products