Skip to content

Known vulnerabilities in nicheaddons Events Addon for Elementor

Is your version affected?

CVE Summary Score Published
CVE-2024-13362 Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in… 6.1 Medium May 1, 2026
CVE-2025-8150 The Events Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… 6.4 Medium Aug 29, 2025
CVE-2024-12061 The Events Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and… 4.3 Medium Dec 18, 2024
CVE-2024-54315 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Events… 6.5 Medium Dec 13, 2024
CVE-2024-49264 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Events… 6.5 Medium Oct 17, 2024
CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium Oct 16, 2024
CVE-2024-4669 The Events Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Basic Slider,… 6.4 Medium Jun 11, 2024
CVE-2023-47827 Incorrect Authorization vulnerability in NicheAddons Events Addon for Elementor allows Accessing Functionality Not… 6.5 Medium Nov 30, 2023

Other nicheaddons products