| CVE-2024-4379 | Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Global Tooltip | leap13 | Premium Addons for Elementor – Powerful Elementor Templates & Widgets | Medium | 5.4 | 2024-05-31 05:31:58 | Deep Dive |
| CVE-2024-4376 | Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget | leap13 | Premium Addons for Elementor – Powerful Elementor Templates & Widgets | Medium | 6.4 | 2024-05-31 05:31:58 | Deep Dive |
| CVE-2024-4205 | Premium Addons for Elementor <= 4.10.31 - Missing Authorization to Information Disclosure | leap13 | Premium Addons for Elementor – Powerful Elementor Templates & Widgets | Medium | 4.3 | 2024-05-31 05:31:57 | Deep Dive |
| CVE-2024-4378 | Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Menu and Shape Divider | leap13 | Premium Addons for Elementor – Powerful Elementor Templates & Widgets | Medium | 6.4 | 2024-05-23 11:02:39 | Deep Dive |
| CVE-2024-4203 | Premium Addons for Elementor <= 4.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting | leap13 | Premium Addons for Elementor – Powerful Elementor Templates & Widgets | Medium | 5.4 | 2024-05-02 16:52:05 | Deep Dive |
| CVE-2024-3647 | Premium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'arrow_style' | leap13 | Premium Addons for Elementor – Powerful Elementor Templates & Widgets | Medium | 6.4 | 2024-05-02 16:52:03 | Deep Dive |
| CVE-2024-3885 | Premium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting | leap13 | Premium Addons for Elementor – Powerful Elementor Templates & Widgets | Medium | 6.4 | 2024-05-02 16:52:01 | Deep Dive |
| CVE-2024-32791 | WordPress Premium Addons for Elementor plugin <= 4.10.25 - Cross Site Scripting (XSS) vulnerability | Leap13 | Premium Addons for Elementor | Medium | 6.5 | 2024-04-24 08:45:30 | Deep Dive |
| CVE-2024-31278 | WordPress Premium Addons for Elementor plugin <= 4.10.22 - Sensitive Data Exposure vulnerability | Leap13 | Premium Addons for Elementor | - | - | 2024-04-10 15:36:28 | Deep Dive |
| CVE-2024-2666 | Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting | leap13 | Premium Addons for Elementor – Powerful Elementor Templates & Widgets | Medium | 5.4 | 2024-04-10 03:31:20 | Deep Dive |
| CVE-2024-2664 | Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) Stored Cross-Site Scripting | leap13 | Premium Addons for Elementor – Powerful Elementor Templates & Widgets | Medium | 6.4 | 2024-04-10 03:09:46 | Deep Dive |
| CVE-2024-2665 | Premium Addons for Elementor <= 4.10.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button | leap13 | Premium Addons for Elementor – Powerful Elementor Templates & Widgets | Medium | 6.4 | 2024-04-10 03:09:46 | Deep Dive |
| CVE-2024-0376 | Premium Addons for Elementor <= 4.10.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link Widget | leap13 | Premium Addons for Elementor – Powerful Elementor Templates & Widgets | Medium | 6.4 | 2024-04-09 18:58:33 | Deep Dive |
| CVE-2024-29106 | WordPress Premium Addons for Elementor plugin <= 4.10.16 - Cross Site Scripting (XSS) vulnerability | Leap13 | Premium Addons for Elementor | Medium | 6.5 | 2024-03-19 15:37:37 | Deep Dive |
| CVE-2024-2399 | Premium Addons for Elementor <= 4.10.23 - Authenticated (Contributor+) Stored Cross-Site Scripting | leap13 | Premium Addons for Elementor – Powerful Elementor Templates & Widgets | Medium | 6.4 | 2024-03-15 06:48:46 | Deep Dive |
| CVE-2024-2000 | Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multi Scroll Widget | Premium Addons for Elementor | Premium Addons Pro for Elementor | Medium | 6.4 | 2024-03-13 15:32:41 | Deep Dive |
| CVE-2024-2238 | Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Mouse Cursor Module | Premium Addons for Elementor | Premium Addons Pro for Elementor | Medium | 6.4 | 2024-03-13 15:32:40 | Deep Dive |
| CVE-2024-1997 | Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Messenger Chat Widget | Premium Addons for Elementor | Premium Addons Pro for Elementor | Medium | 6.4 | 2024-03-13 15:32:39 | Deep Dive |
| CVE-2024-2237 | Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Global Badge Module | Premium Addons for Elementor | Premium Addons Pro for Elementor | Medium | 6.4 | 2024-03-13 15:32:39 | Deep Dive |
| CVE-2024-1996 | Premium Addons for Elementor PRO <= 2.9.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget link | Premium Addons for Elementor | Premium Addons Pro for Elementor | Medium | 6.4 | 2024-03-13 15:32:39 | Deep Dive |