Skip to content

Known vulnerabilities in WPBITS Addons For Elementor Page Builder

Is your version affected?

CVE Summary Score Published
CVE-2024-13362 Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in… 6.1 Medium May 1, 2026
CVE-2026-39703 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbits WPBITS… 6.5 Medium Apr 8, 2026
CVE-2025-9082 The WPBITS Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget… 6.4 Medium Jan 28, 2026
CVE-2024-37945 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbits WPBITS… 6.5 Medium Aug 14, 2025
CVE-2024-56285 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbits WPBITS… 6.5 Medium Jan 7, 2025
CVE-2025-22316 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbits WPBITS… 5.9 Medium Jan 7, 2025
CVE-2024-8962 The WPBITS Addons For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG… 6.4 Medium Dec 4, 2024
CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium Oct 16, 2024
CVE-2024-4862 The WPBITS Addons For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… 6.4 Medium Jul 9, 2024
CVE-2024-32593 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPBits WPBITS… 6.5 Medium Apr 18, 2024
CVE-2024-2129 The WPBITS Addons For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… 6.4 Medium Mar 20, 2024