Enter Addons – Ultimate Template Builder for Elementor

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Enter Addons – Ultimate Template Builder for Elementor

Information

Software Type Plugin
Software Slug enteraddons (view on wordpress.org)
Software Status Active
Software Author themelooks
Software Website themelooks.org
Software Downloads 41,095
Software Active Installs 1,000
Software Record Last Updated July 16, 2026

10 Vulnerabilities

Submit a Vulnerability
Enter Addons <= 2.3.2 - Cross-Site Request Forgery
4.3
CVE-2026-25014
Jan 28, 2026
Researcher: Nabil Irawan
Enter Addons <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown and Image Comparison Widgets
6.4
CVE-2025-8687
Dec 12, 2025
Researcher: zer0gh0st
Enter Addons <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-56252
Dec 30, 2024
Researcher: João Pedro Soares de Alcântara
Enter Addons – Ultimate Template Builder for Elementor <= 2.1.9 - Authenticated (Contributor+) Post Disclosure
4.3
CVE-2024-10868
Nov 22, 2024
Researcher: Francesco Carlucci
Enter Addons <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-47625
Sep 30, 2024
Researcher: João Pedro Soares de Alcântara
Enter Addons – Ultimate Template Builder for Elementor <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Events Card Widget
6.4
CVE-2024-7611
Sep 6, 2024
Researcher: lowol
Enter Addons <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-43225
Aug 9, 2024
Researcher: Michael
Enter Addons <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-37263
Jun 27, 2024
Researcher: vps1-
Enter Addons – Ultimate Template Builder for Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animation Title widget img tag
6.4
CVE-2024-3680
May 8, 2024
Researcher: Sebastião Gavião (Sebastgav)
Enter Addons – Ultimate Template Builder for Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading widget
6.4
CVE-2024-3831
May 8, 2024
Researcher: Sebastião Gavião (Sebastgav)
Title Status CVE ID CVSS Researchers Date
Enter Addons <= 2.3.2 - Cross-Site Request Forgery Patched CVE-2026-25014 4.3 Nabil Irawan January 28, 2026
Enter Addons <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown and Image Comparison Widgets Patched CVE-2025-8687 6.4 zer0gh0st December 12, 2025
Enter Addons <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-56252 6.4 João Pedro Soares de Alcântara December 30, 2024
Enter Addons – Ultimate Template Builder for Elementor <= 2.1.9 - Authenticated (Contributor+) Post Disclosure Patched CVE-2024-10868 4.3 Francesco Carlucci November 22, 2024
Enter Addons <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-47625 6.4 João Pedro Soares de Alcântara September 30, 2024
Enter Addons – Ultimate Template Builder for Elementor <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Events Card Widget Patched CVE-2024-7611 6.4 lowol September 6, 2024
Enter Addons <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-43225 6.4 Michael August 9, 2024
Enter Addons <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-37263 6.4 vps1- June 27, 2024
Enter Addons – Ultimate Template Builder for Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animation Title widget img tag Patched CVE-2024-3680 6.4 Sebastião Gavião (Sebastgav) May 8, 2024
Enter Addons – Ultimate Template Builder for Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading widget Patched CVE-2024-3831 6.4 Sebastião Gavião (Sebastgav) May 8, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation