Qi Addons For Elementor — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in Qi Addons For Elementor, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-62079	WordPress Qi Addons For Elementor plugin <= 1.11 - Cross Site Scripting (XSS) vulnerability CWE-79	6.5	Medium	2026-09-30
CVE-2026-92249	Qi Addons For Elementor <= 1.11 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter CWE-79	6.1	Medium	2026-09-18
CVE-2025-8146	Qi Addons for Elementor <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TypeOut Text Widget CWE-79	6.4	Medium	2025-08-02
CVE-2025-6252	Qi Addons For Elementor <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79	6.4	Medium	2025-06-28
CVE-2024-13699	Qi Addons For Elementor <= 1.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79	6.4	Medium	2025-02-04
CVE-2024-9530	Qi Addons For Elementor <= 1.8.0 - Sensitive Information Exposure CWE-200	4.3	Medium	2024-10-23
CVE-2024-4887	Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Local File Inclusion CWE-98	7.5	High	2024-06-07
CVE-2024-4364	Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget CWE-79	6.4	Medium	2024-06-06
CVE-2023-47679	WordPress Qi Addons For Elementor plugin <= 1.6.3 - Local File Inclusion vulnerability CWE-22	6.4	Medium	2024-05-17
CVE-2024-3309	Qi Addons For Elementor <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown widget CWE-79	6.4	Medium	2024-04-27
CVE-2024-0826	Qi Addons For Elementor <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79	6.4	Medium	2024-04-09
CVE-2023-47680	WordPress Qi Addons For Elementor Plugin <= 1.6.3 is vulnerable to Cross Site Scripting (XSS) CWE-79	6.5	Medium	2023-11-13

All 12 known CVE vulnerabilities affecting Qi Addons For Elementor with full Chinese analysis, references, and POCs where available.