Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

ElementsReady Addons for Elementor — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in ElementsReady Addons for Elementor, with AI-generated Chinese analysis, references, and POCs.

Vendor: QuomodoSoft

CVE ID Title CVSS Severity Published
CVE-2026-91047 ElementsReady Addons for Elementor <= 6.7.2 - Unauthenticated Paid Download Access Bypass via 'downloadtype' Parameter - - 2026-10-19
CVE-2026-91046 ElementsReady Addons for Elementor <= 6.7.2 - Subscriber+ Plugin Settings Overwrite via Missing Authorization - - 2026-10-19
CVE-2025-39546 WordPress ElementsReady Addons for Elementor plugin <= 6.6.2 - Cross Site Request Forgery (CSRF) Vulnerability CWE-352 4.3 Medium 2025-04-16
CVE-2024-10356 ElementsReady Addons for Elementor <= 6.4.8 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates CWE-200 4.3 Medium 2024-12-17
CVE-2024-54224 WordPress ElementsReady Addons for Elementor plugin <= 6.4.7 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2024-12-09
CVE-2024-51787 WordPress ElementsReady Addons for Elementor plugin <= 6.4.3 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2024-11-09
CVE-2024-9444 ElementsReady Addons for Elementor <= 6.4.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CWE-79 6.4 Medium 2024-10-16
CVE-2024-47353 WordPress ElementsReady Addons for Elementor plugin <= 6.4.2 - Open Redirection vulnerability CWE-601 4.7 Medium 2024-10-11
CVE-2024-47329 WordPress ElementsReady Addons for Elementor plugin <= 6.4.0 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2024-10-06
CVE-2024-5152 ElementsReady Addons for Elementor <= 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2024-06-06
CVE-2024-34374 WordPress ElementsReady Addons for Elementor plugin <= 5.8.0 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2024-05-06

All 11 known CVE vulnerabilities affecting ElementsReady Addons for Elementor with full Chinese analysis, references, and POCs where available.