| CVE-2024-10356 | ElementsReady Addons for Elementor <= 6.4.8 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates | quomodosoft | ElementsReady Addons for Elementor | Medium | 4.3 | 2024-12-17 12:43:38 | Deep Dive |
| CVE-2024-54443 | WordPress Advanced Data Table For Elementor plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability | PluginsCafe | Advanced Data Table For Elementor | Medium | 6.5 | 2024-12-16 14:14:16 | Deep Dive |
| CVE-2024-10690 | Shortcodes for Elementor <= 1.0.4 - Authenticated (Contributor+) Post Disclosure | rstheme2017 | Shortcodes for Elementor | Medium | 4.3 | 2024-12-14 05:34:15 | Deep Dive |
| CVE-2024-54338 | WordPress Hello Event Widgets For Elementor plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability | christer_f | Hello Event Widgets For Elementor | Medium | 6.5 | 2024-12-13 14:25:38 | Deep Dive |
| CVE-2024-54316 | WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.8 - Cross Site Scripting (XSS) vulnerability | nicheaddons | Restaurant & Cafe Addon for Elementor | Medium | 6.5 | 2024-12-13 14:25:24 | Deep Dive |
| CVE-2024-54314 | WordPress Primary Addon for Elementor plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability | nicheaddons | Primary Addon for Elementor | Medium | 6.5 | 2024-12-13 14:25:23 | Deep Dive |
| CVE-2024-54315 | WordPress Events Addon for Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability | nicheaddons | Events Addon for Elementor | Medium | 6.5 | 2024-12-13 14:25:23 | Deep Dive |
| CVE-2024-54278 | WordPress News Ticker for Elementor plugin <= 2.1.3 - Broken Access Control vulnerability | Plugin Devs | News Ticker for Elementor | Medium | 4.3 | 2024-12-13 14:24:54 | Deep Dive |
| CVE-2023-38480 | WordPress Booster Elementor Addons plugin <= 1.4.9 - Broken Access Control vulnerability | Certain Dev | Booster Elementor Addons | Medium | 5.3 | 2024-12-13 14:23:57 | Deep Dive |
| CVE-2023-35046 | WordPress Dynamic Visibility for Elementor plugin <= 5.0.5 - Broken Access Control vulnerability | Dynamic.ooo | Dynamic Visibility for Elementor | Medium | 5.4 | 2024-12-13 14:23:39 | Deep Dive |
| CVE-2024-10784 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.126 - Authenticated (Contributor+) Stored Cross-Site Scripting | unitecms | Unlimited Elements For Elementor | Medium | 6.4 | 2024-12-12 06:46:32 | Deep Dive |
| CVE-2024-12059 | ElementInvader Addons for Elementor <= 1.3.1 - Missing Authorization to Arbitrary Options Read | elementinvader | ElementInvader Addons for Elementor | Medium | 4.3 | 2024-12-12 05:24:25 | Deep Dive |
| CVE-2024-53816 | WordPress Tutor LMS Elementor Addons plugin <= 2.1.5 - Broken Access Control vulnerability | Themeum | Tutor LMS Elementor Addons | Medium | 4.3 | 2024-12-09 12:59:40 | Deep Dive |
| CVE-2024-54247 | WordPress ABCBiz Addons and Templates for Elementor plugin <= 2.0.2 - Stored Cross Site Scripting (XSS) vulnerability | ABCBiz | ABCBiz Addons and Templates for Elementor | Medium | 6.5 | 2024-12-09 12:45:07 | Deep Dive |
| CVE-2024-54253 | WordPress Xpro Addons For Elementor plugin <= 1.4.6.5 - Cross Site Scripting (XSS) vulnerability | Xpro | Xpro Elementor Addons | Medium | 6.5 | 2024-12-09 12:44:05 | Deep Dive |
| CVE-2024-54224 | WordPress ElementsReady Addons for Elementor plugin <= 6.4.7 - Cross Site Scripting (XSS) vulnerability | quomodosoft | ElementsReady Addons for Elementor | Medium | 6.5 | 2024-12-09 11:32:15 | Deep Dive |
| CVE-2024-54230 | WordPress Unlock Addons for Elementor plugin <= 2.2.4 - Cross Site Scripting (XSS) vulnerability | Masud Hasan | Unlock Addons for Elementor | Medium | 6.5 | 2024-12-09 11:32:14 | Deep Dive |
| CVE-2024-54228 | WordPress Wot Elementor Widgets plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability | Weboccult Technologies Pvt Ltd | Wot Elementor Widgets | Medium | 6.5 | 2024-12-09 11:32:14 | Deep Dive |
| CVE-2024-54232 | WordPress RRAddons for Elementor plugin <= 1.1.0 - Stored Cross Site Scripting (XSS) vulnerability | RRDevs | RRAddons for Elementor | Medium | 6.5 | 2024-12-09 11:32:13 | Deep Dive |
| CVE-2024-54260 | WordPress News Kit Elementor Addons plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability | blazethemes | News Kit Elementor Addons | Medium | 6.5 | 2024-12-09 11:32:12 | Deep Dive |