Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in PowerPack Addons for Elementor (Free Widgets, Extensions and Templates), with AI-generated Chinese analysis, references, and POCs.

Vendor: ideaboxcreations

CVE IDTitleCVSSSeverityPublished
CVE-2025-8388 PowerPack Lite for Elementor <= 2.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Via 'cursor_url' CWE-79 6.4 Medium2025-09-10
CVE-2025-1512 PowerPack Elementor Addons (Free Widgets, Extensions and Templates) <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2025-04-01
CVE-2024-10692 PowerPack Elementor Addons (Free Widgets, Extensions and Templates) <= 2.8.1 - Authenticated (Contributor+) Post Disclosure CWE-639 4.3 Medium2024-12-06
CVE-2024-5787 PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Effects Widget CWE-79 6.4 Medium2024-06-13
CVE-2024-5327 PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CWE-79 6.4 Medium2024-05-30
CVE-2024-2492 PowerPack Addons for Elementor <= 2.7.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Tweet Widget CWE-79 6.4 Medium2024-04-09
CVE-2024-2491 PowerPack Addons for Elementor <= 2.7.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via *_html_tag* CWE-79 6.4 Medium2024-03-30
CVE-2024-1411 PowerPack Addons for Elementor <= 2.7.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Buttons Widget CWE-79 6.4 Medium2024-02-20
CVE-2024-1055 PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 5.4 Medium2024-02-07
CVE-2023-6984 PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.13 - Cross-Site Request Forgery CWE-352 5.3 Medium2024-01-03

All 10 known CVE vulnerabilities affecting PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) with full Chinese analysis, references, and POCs where available.