6.5
Medium
CVE-2024-34764 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper…
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor allows Stored XSS.This issue affects Essential Addons for Elementor: from n/a through 5.9.15.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Essential Addons for Elementor 5.9 | earliest → 5.9.15 | No fix stated |
Other CVEs of Essential Addons for Elementor
The 15 CVEs of Essential Addons for Elementor →
CVE-2026-110898
Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor…
6.4
Medium
CVE-2026-102394
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper…
6.5
Medium
CVE-2026-81777
Authentication Bypass by Spoofing vulnerability in WPDeveloper Essential Addons for Elementor allows Identity Spoofing
5.3
Medium
CVE-2026-25440
Unauthenticated Broken Access Control in Essential Addons for Elementor < 6.6.0 versions
5.3
Medium