Browse all 7 CVE security advisories affecting Premium Addons for Elementor. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Premium Addons for Elementor is a WordPress plugin extending Elementor's functionality with widgets and templates. Historically, it has been vulnerable to multiple security issues including cross-site scripting (XSS), remote code execution (RCE), privilege escalation, and authentication bypass vulnerabilities. The plugin has accumulated seven CVEs, reflecting persistent security challenges. Notable incidents include a critical RCE vulnerability in versions before 4.9.33 that allowed unauthenticated attackers to execute arbitrary code, and multiple XSS flaws enabling malicious script injection. These vulnerabilities highlight the risks of maintaining complex third-party extensions in WordPress environments, where security updates are crucial for preventing potential compromises.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2023-34012 | WordPress Premium Addons PRO Plugin <= 2.8.24 is vulnerable to Cross Site Scripting (XSS) — Premium Addons PRO CWE-79 | 7.1 | High | 2023-06-23 |
This page lists every published CVE security advisory associated with Premium Addons for Elementor. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.