All 16 CVE vulnerabilities found in Xpro Addons — 140+ Widgets for Elementor, with AI-generated Chinese analysis, references, and POCs.
This page documents security vulnerabilities affecting Xpro Addons — 140+ Widgets for Elementor, a WordPress plugin developed by Prof-themes, focusing on weaknesses such as cross-site scripting, insecure direct object references, and authorization bypasses. The collection aggregates all publicly disclosed security issues and vulnerability advisories associated with this specific plugin product, covering the entire timeline from its initial release through the most recent updates. This resource allows security researchers, developers, and site administrators to track vendor responses and patch release schedules, understand the technical details and attack vectors of specific weakness classes impacting Elementor-based sites, and look up a product's historical vulnerability data to assess long-term risk and stability. By consolidating these reports into a single view, the page provides a comprehensive overview of the plugin's security posture over time, enabling users to identify recurring issues, evaluate the frequency of critical fixes, and make informed decisions regarding plugin maintenance and updates. The information presented is derived from official vendor disclosures, third-party security databases, and community reports, ensuring that readers have access to accurate and verified data regarding known flaws. This aggregation serves as a reference point for auditing WordPress ecosystems, helping teams prioritize remediation efforts and maintain higher security standards across their digital infrastructure without relying on scattered or incomplete sources.
Vendor: xpro
All 16 known CVE vulnerabilities affecting Xpro Addons — 140+ Widgets for Elementor with full Chinese analysis, references, and POCs where available.