Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits, with AI-generated Chinese analysis, references, and POCs.

This page documents known security vulnerabilities affecting the Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits WordPress plugin. It serves as a centralized resource for tracking weaknesses associated with this specific vendor and product within the broader Elementor ecosystem. The collection on this page aggregates publicly disclosed security issues, including cross-site scripting, privilege escalation, and information disclosure flaws. The data covers vulnerability reports identified from the plugin’s initial release through recent updates, ensuring a comprehensive historical view. While the primary focus is on documented CVEs and vendor advisories, the dataset also includes emerging threats that have been validated against current versions of the software. This temporal scope allows users to assess the long-term security posture of the product over time. Visitors to this page can track the vendor’s responsiveness to security advisories and observe patterns in how flaws are patched. Users can also understand specific weakness classes by examining the technical details of related bugs, which often share common underlying code defects. Furthermore, this resource enables administrators to look up the complete vulnerability history of Master Addons for Elementor, helping them make informed decisions about updating, configuring, or replacing the extension based on its track record of handling security risks. This information supports proactive risk management and enhances overall WordPress site security.

Vendor: litonice13

CVE IDTitleCVSSSeverityPublished
CVE-2026-9281 Master Addons For Elementor <= 3.1.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'jtlma_custom_js' Page Setting (Custom JS Extension) CWE-79 6.4 Medium2026-06-06
CVE-2026-2486 Master Addons For Elementor <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ma_el_bh_table_btn_text' CWE-79 6.4 Medium2026-02-20
CVE-2025-8874 Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox CWE-79 6.4 Medium2025-08-12
CVE-2025-5284 Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2025-07-16
CVE-2025-0433 Master Addons <= 2.0.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter CWE-79 6.4 Medium2025-03-04
CVE-2024-9618 Master Addons <= 2.0.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets CWE-79 6.4 Medium2025-03-04
CVE-2024-9502 Master Addons -- Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip Module CWE-79 6.4 Medium2025-01-07
CVE-2024-6282 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via data-jltma-wrapper-link Element CWE-79 5.4 Medium2024-09-10
CVE-2024-5382 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to MA Template Creation or Modification CWE-862 6.5 Medium2024-06-07
CVE-2024-5542 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via Navigation Menu Widget CWE-79 7.2 High2024-06-07
CVE-2024-3134 Master Addons for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2024-05-16
CVE-2024-4580 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2024-05-16
CVE-2024-4265 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.5.9 - Contributor+ Stored Cross-Site Scripting CWE-79 6.4 Medium2024-05-02
CVE-2024-2139 Master Addons for Elementor <= 2.0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget CWE-79 6.4 Medium2024-03-27

All 14 known CVE vulnerabilities affecting Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits with full Chinese analysis, references, and POCs where available.