Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Essential Addons for Elementor — Vulnerabilities & Security Advisories 18

All 18 CVE vulnerabilities found in Essential Addons for Elementor, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security advisories for Essential Addons for Elementor, a third-party plugin developed by Brainstorm Force, focusing on common web application weaknesses. It collects a broad spectrum of vulnerabilities, including cross-site scripting, SQL injection, and privilege escalation flaws, covering the historical timeline of published security fixes for this specific product. Readers can use this resource to track the vendor's advisory patterns, understand specific weakness classes affecting WordPress plugins, and review the complete vulnerability history associated with the plugin. The data provides a clear view of past security issues without listing individual CVE identifiers.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2026-102394 WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2026-10-01
CVE-2026-81777 WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability CWE-290 5.3 Medium 2026-08-28
CVE-2026-18039 Essential Addons for Elementor < 6.7.2 - Unauthenticated Privilege Escalation via Custom Profile Field Mass Assignment - - 2026-08-14
CVE-2026-13345 Essential Addons for Elementor - Lite < 6.6.10 - Unauthenticated Draft/Private WooCommerce Product Disclosure via Compare Table - - 2026-07-30
CVE-2026-13344 Essential Addons for Elementor - Lite < 6.6.10 - Contributor+ Stored XSS via Pricing Table Title Tag - - 2026-07-30
CVE-2026-25440 WordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerability CWE-862 5.3 Medium 2026-06-15
CVE-2026-23543 WordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerability CWE-862 5.3 Medium 2026-02-19
CVE-2025-69092 WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2025-12-30
CVE-2025-64352 WordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerability CWE-862 2.7 Low 2025-10-31
CVE-2025-24752 WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2025-04-17
CVE-2025-39589 WordPress Essential Addons for Elementor plugin <= 6.1.9 - Sensitive Data Exposure Vulnerability CWE-497 4.3 Medium 2025-04-16
CVE-2025-39590 WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium 2025-04-16
CVE-2024-56063 WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2024-12-31
CVE-2024-39649 WordPress Essential Addons for Elementor plugin <= 5.9.26 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2024-08-01
CVE-2023-41955 WordPress Essential Addons for Elementor plugin <= 5.8.8 - Contributor+ Privilege Escalation vulnerability CWE-269 8.8 High 2024-05-17
CVE-2023-32243 WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation CWE-287 9.8 Critical 2023-05-12
CVE-2022-0320 Essential Addons for Elementor < 5.0.5 - Unauthenticated LFI CWE-22 9.8 - 2022-02-01
CVE-2021-24255 Essential Addons for Elementor < 4.5.4 - Contributor+ Stored Cross-Site Scripting (XSS) CWE-79 5.4 - 2021-05-05

All 18 known CVE vulnerabilities affecting Essential Addons for Elementor with full Chinese analysis, references, and POCs where available.