Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Livemesh Addons by Elementor — Vulnerabilities & Security Advisories 16

All 16 CVE vulnerabilities found in Livemesh Addons by Elementor, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerabilities associated with Livemesh Addons by Elementor, a popular WordPress extension pack, focusing on specific weakness types and security tags. It collects known security flaws in this product line, covering advisories published within the active tracking period maintained by security researchers and the vendor. Here, users can track the vendor’s security advisories, understand the technical nature of each weakness class, and review the full vulnerability history of the product. The collection highlights common issues such as cross-site scripting, SQL injection, and unauthorized access points that have affected various versions. By consolidating these data points, the page serves as a reference for developers and security teams seeking to patch legacy defects or assess risk exposure. It does not include unverified reports or future predictions, limiting content to confirmed issues documented in public databases. Readers can filter entries by severity, component, or fix status to streamline their audit process. The interface supports searching by keyword, date range, or impact category, enabling quick identification of critical patches. This resource is updated regularly to reflect newly disclosed issues and vendor responses, ensuring that the vulnerability landscape remains current and actionable for maintenance planning.

Vendor: livemesh

CVE ID Title CVSS Severity Published
CVE-2026-1572 Livemesh Addons by Elementor <= 9.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via Plugin Settings CWE-79 6.4 Medium 2026-04-16
CVE-2026-1620 Livemesh Addons by Elementor <= 9.0 - Authenticated (Contributor+) Local File Inclusion via Widget Template Parameter CWE-98 8.8 High 2026-04-16
CVE-2024-8858 Elementor Addons by Livemesh <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via piechart_settings Parameter CWE-79 6.4 Medium 2024-09-25
CVE-2024-3639 Elementor Addons by Livemesh <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Grid CWE-79 6.4 Medium 2024-07-04
CVE-2024-2926 Elementor Addons by Livemesh <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Various Widgets CWE-79 6.4 Medium 2024-07-04
CVE-2024-2385 Elementor Addons by Livemesh <= 8.4 - Authenticated (Contributor+) Limited Local File Inclusion via Widgets CWE-22 8.8 High 2024-07-04
CVE-2024-3638 Elementor Addons by Livemesh <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Marquee Text Widget, Testimonials Widget, and Testimonial Slider Widgets CWE-79 6.4 Medium 2024-07-04
CVE-2024-2655 Elementor Addons by Livemesh <= 8.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name CWE-79 6.4 Medium 2024-04-10
CVE-2024-2539 Elementor Addons by Livemesh <= 8.3.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget _id attribute CWE-79 6.4 Medium 2024-04-10
CVE-2024-1458 Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Widget CWE-79 6.4 Medium 2024-04-09
CVE-2024-1461 Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget CWE-79 6.4 Medium 2024-04-09
CVE-2024-1465 Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Carousel Widget CWE-79 6.4 Medium 2024-04-09
CVE-2024-1464 Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Slider Widget CWE-79 6.4 Medium 2024-04-09
CVE-2024-1466 Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Multislider Widget CWE-79 6.4 Medium 2024-04-09
CVE-2024-1235 Elementor Addons by Livemesh <= 8.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2024-02-20
CVE-2024-0448 Elementor Addons by Livemesh <= 8.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2024-02-05

All 16 known CVE vulnerabilities affecting Livemesh Addons by Elementor with full Chinese analysis, references, and POCs where available.