Known vulnerabilities in WPVibes Addon Elements for Elementor (formerly Elementor Addon Elements)
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-12537 | The Addon Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up… | 6.4 Medium | Dec 14, 2025 |
| CVE-2024-13215 | The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,… | 4.3 Medium | Jan 15, 2025 |
| CVE-2022-4974 | The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… | 6.3 Medium | Oct 16, 2024 |
| CVE-2024-8902 | The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,… | 4.3 Medium | Oct 12, 2024 |
| CVE-2024-7122 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in… | 6.4 Medium | Aug 30, 2024 |
| CVE-2024-4401 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ and… | 6.4 Medium | Aug 30, 2024 |
| CVE-2024-4569 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter… | 6.4 Medium | Jun 27, 2024 |
| CVE-2024-4570 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter… | 6.4 Medium | Jun 27, 2024 |
| CVE-2024-2092 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… | 5.4 Medium | Jun 12, 2024 |
| CVE-2024-3743 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Stack… | 6.4 Medium | May 2, 2024 |
| CVE-2024-2792 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via widgets in all… | 6.4 Medium | Apr 9, 2024 |
| CVE-2024-2091 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… | 5.4 Medium | Mar 28, 2024 |
| CVE-2024-1393 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'icon_align'… | 6.4 Medium | Mar 13, 2024 |
| CVE-2024-1391 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… | 6.4 Medium | Mar 13, 2024 |
| CVE-2024-1422 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the modal popup… | 6.4 Medium | Mar 13, 2024 |
| CVE-2024-1392 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'button1_icon'… | 6.4 Medium | Mar 13, 2024 |
| CVE-2024-1358 | The Elementor Addon Elements plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and… | 8.8 High | Mar 13, 2024 |
| CVE-2023-4690 | The Elementor Addon Elements plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and… | 5.4 Medium | Nov 15, 2023 |
| CVE-2023-5381 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in… | 4.4 Medium | Nov 15, 2023 |
| CVE-2023-4723 | The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and… | 5.3 Medium | Nov 15, 2023 |
| CVE-2023-4689 | The Elementor Addon Elements plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and… | 5.4 Medium | Nov 15, 2023 |
Other WPVibes products
Elementor Addon Elements 6
AnyWhere Elementor 5
Form Vibes – Database Manager for Forms 5
WP Mail Log 4
Dynific Addons for Elementor (formerly AnyWhere Elementor) 2
anywhere_elementor 1
AnyWhere Elementor Pro 1
form_vibes 1
Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database 1
Redirect 404 Error Page to Homepage or Custom Page with Logs 1