Stratum Widgets for Elementor

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Stratum Widgets for Elementor

Information

Software Type Plugin
Software Slug stratum (view on wordpress.org)
Software Status Active
Software Author jetmonsters
Software Website motopress.com
Software Downloads 521,737
Software Active Installs 20,000
Software Record Last Updated July 17, 2026

6 Vulnerabilities

Submit a Vulnerability
Stratum Widgets for Elementor <= 1.6.1 - Missing Authorization
4.3
CVE-2025-69013
Dec 27, 2025
Researcher: benzdeus
Stratum – Elementor Widgets <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Google Maps and Image Hotspot Widgets
6.4
CVE-2025-7845
Jul 31, 2025
Researcher: zer0gh0st
Stratum – Elementor Widgets <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Vulnerability via Image Hotspot Widget
6.4
CVE-2024-13642
Jan 29, 2025
Researcher: zer0gh0st
Stratum – Elementor Widgets <= 1.4.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
4.3
CVE-2024-10316
Nov 20, 2024
Researcher: Ankit Patel
Stratum – Elementor Widgets <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
6.4
CVE-2024-5611
Jun 14, 2024
Researcher: wesley (wcraft)
Stratum <= 1.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-29914
Mar 25, 2024
Researcher: Abu Hurayra (HurayraIIT)
Title Status CVE ID CVSS Researchers Date
Stratum Widgets for Elementor <= 1.6.1 - Missing Authorization Patched CVE-2025-69013 4.3 benzdeus December 27, 2025
Stratum – Elementor Widgets <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Google Maps and Image Hotspot Widgets Patched CVE-2025-7845 6.4 zer0gh0st July 31, 2025
Stratum – Elementor Widgets <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Vulnerability via Image Hotspot Widget Patched CVE-2024-13642 6.4 zer0gh0st January 29, 2025
Stratum – Elementor Widgets <= 1.4.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates Patched CVE-2024-10316 4.3 Ankit Patel November 20, 2024
Stratum – Elementor Widgets <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget Patched CVE-2024-5611 6.4 wesley (wcraft) June 14, 2024
Stratum <= 1.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-29914 6.4 Abu Hurayra (HurayraIIT) March 25, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation