Extension WordPress
Vulnérabilités Premium Addons for Elementor – Powerful Elementor Templates & Widgets
Cette page rassemble les failles publiées pour Premium Addons for Elementor – Powerful Elementor Templates & Widgets, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Premium Addons for Elementor – Powerful Elementor Templates & Widgets
38 fiches
Premium Addons for Elementor <= 4.11.84 – Authenticated (Contributor+) Stored Cross-Site Scripting via 'premium_tooltip_text' Parameter
The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'premium_tooltip_text' parameter in all versions up to, and including, 4.11.84 due to insufficient input sanitization and…
*-4.11.84
4.11.85
10/07/2026
Premium Addons for Elementor <= 4.11.70 – Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_svg' Parameter
The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_svg' parameter in versions up to, and including, 4.11.70 due to insufficient input sanitization and output…
*-4.11.70
4.11.71
01/05/2026
Premium Addons for Elementor <= 4.11.63 – Missing Authorization to Authenticated (Subscriber+) Settings Update
The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 4.11.63. This makes…
*-4.11.63
4.11.64
17/01/2026
Premium Addons for Elementor <= 4.11.53 – Cross-Site Request Forgery via 'insert_inner_template'
The Premium Addons for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.11.53. This is due to missing nonce validation in the 'insert_inner_template' function. This makes it possible for…
*-4.11.53
4.11.54
22/12/2025
Premium Addons for Elementor <= 4.11.53 – Missing Authorization to Unauthenticated Sensitive Information Exposure via 'get_template_content'
The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_template_content' function in all versions up to, and including,…
*-4.11.53
4.11.54
22/12/2025
Premium Addons for Elementor <= 4.11.53 – Unauthenticated Information Exposure
The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.11.53. This makes it possible for unauthenticated attackers to extract sensitive…
*-4.11.53
4.11.54
04/12/2025
Premium Addons for Elementor <= 4.10.69 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's linkURL in the Mobile Menu element in all versions up to, and including, 4.10.69 due to insufficient input sanitization and output…
*-4.10.69
4.10.70
03/07/2025
Premium Addons for Elementor <= 4.11.8 – Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-countdown attribute of Countdown widget in all versions up to, and including, 4.11.8 due to insufficient input sanitization and output escaping. This…
*-4.11.8
4.11.9
10/06/2025
Premium Addons for Elementor <= 4.10.56 – Missing Authorization
The Premium Addons for Elementor plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 4.10.56. This makes it possible for authenticated attackers, with…
*-4.10.56
4.10.57
19/12/2024
Premium Addons for Elementor <= 4.10.60 – Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Box Widget
The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video Box widget in all versions up to, and including, 4.10.60 due to insufficient input sanitization and output escaping on user…
*-4.10.60
4.10.61
28/10/2024
Premium Addons for Elementor <= 4.10.52 – Authenticated (Contributor+) Stored Cross-Site Scripting via Media Grid Widget
The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Media Grid widget in all versions up to, and including, 4.10.52 due to insufficient input sanitization and output escaping on user…
*-4.10.52
4.10.53
26/09/2024
Premium Addons for Elementor <= 4.10.38 – Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion and Arbitrary Title Update
The Premium Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'check_temp_validity' and 'update_template_title' functions in all versions up to, and including, 4.10.38. This…
*-4.10.38
4.10.39
07/08/2024
Premium Addons for Elementor <= 4.10.36 – Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Animated Text Widget
The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Animated Text widget in all versions up to, and including, 4.10.36 due to insufficient input sanitization and output escaping on user…
*-4.10.36
4.10.37
11/07/2024
Premium Addons for Elementor <= 4.10.34 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.10.34 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible…
*-4.10.34
4.10.35
09/07/2024
Premium Addons for Elementor <= 4.10.35 – Regular Expressions Denial of Service
The Premium Addons for Elementor plugin for WordPress is vulnerable to Regular Expression Denial of Service (ReDoS) in all versions up to, and including, 4.10.35. This is due to processing user-supplied input as a regular expression. This makes…
*-4.10.35
4.10.36
03/07/2024
Premium Addons for Elementor <= 4.10.36 – Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown widget in all versions up to, and including, 4.10.36 due to insufficient input sanitization and output escaping on user supplied…
*-4.10.36
4.10.37
02/07/2024
Premium Addons for Elementor <= 4.10.33 – Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
The Premium Addons for Elementor plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via several parameters in all versions up to, and including, 4.10.33 due to insufficient input sanitization and output escaping. This makes it possible…
*-4.10.33
4.10.34
11/06/2024
Premium Addons for Elementor <= 4.10.31 – Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget
The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Fancy Text widget in all versions up to, and including, 4.10.31 due to insufficient input sanitization and output escaping on user…
*-4.10.31
4.10.32
30/05/2024
Premium Addons for Elementor <= 4.10.31 – Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Global Tooltip
The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Global Tooltip widget in all versions up to, and including, 4.10.31 due to insufficient input sanitization and output escaping on user…
*-4.10.31
4.10.32
30/05/2024
Premium Addons for Elementor <= 4.10.31 – Missing Authorization to Information Disclosure
The Premium Addons for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_template_content() function in all versions up to, and including, 4.10.31. This makes it possible for…
*-4.10.31
4.10.32
30/05/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.