aThemes Addons for Elementor

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   aThemes Addons for Elementor

Information

Software Type Plugin
Software Slug athemes-addons-for-elementor-lite (view on wordpress.org)
Software Status Active
Software Author smub
Software Website athemes.com
Software Downloads 105,869
Software Active Installs 8,000
Software Record Last Updated July 17, 2026

8 Vulnerabilities

Submit a Vulnerability
aThemes Addons for Elementor <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Widget Setting
6.4
CVE-2026-8613
Jun 9, 2026
Researcher: Romain Deperne (ang3L)
aThemes Addons for Elementor <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call To Action Widget
6.4
CVE-2025-12837
Nov 7, 2025
Researcher: Abu Hurayra (HurayraIIT)
aThemes Addons for Elementor <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-60112
Sep 26, 2025
Researcher: Abu Hurayra (HurayraIIT)
aThemes Addons for Elementor Lite <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
6.4
CVE-2025-8149
Sep 5, 2025
Researcher: zer0gh0st
aThemes Addons for Elementor <= 1.1.3 - Authenticated (Contributor+) Local File Inclusion
8.8
CVE-2025-32158
Apr 4, 2025
Researcher: João Pedro Soares de Alcântara
aThemes Addons for Elementor <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-22646
Feb 3, 2025
Researcher: Michael
aThemes Addons for Elementor <= 1.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-13547
Jan 31, 2025
Researcher: Nishiv
aThemes Addons for Elementor <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-51675
Nov 1, 2024
Researcher: Khalid Yusuf
Title Status CVE ID CVSS Researchers Date
aThemes Addons for Elementor <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Widget Setting Patched CVE-2026-8613 6.4 Romain Deperne (ang3L) June 9, 2026
aThemes Addons for Elementor <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call To Action Widget Patched CVE-2025-12837 6.4 Abu Hurayra (HurayraIIT) November 7, 2025
aThemes Addons for Elementor <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-60112 6.4 Abu Hurayra (HurayraIIT) September 26, 2025
aThemes Addons for Elementor Lite <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget Patched CVE-2025-8149 6.4 zer0gh0st September 5, 2025
aThemes Addons for Elementor <= 1.1.3 - Authenticated (Contributor+) Local File Inclusion Patched CVE-2025-32158 8.8 João Pedro Soares de Alcântara April 4, 2025
aThemes Addons for Elementor <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-22646 6.4 Michael February 3, 2025
aThemes Addons for Elementor <= 1.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-13547 6.4 Nishiv January 31, 2025
aThemes Addons for Elementor <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-51675 6.4 Khalid Yusuf November 1, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation