The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce

Information

Software Type Plugin
Software Slug the-plus-addons-for-elementor-page-builder (view on wordpress.org)
Software Status Active
Software Author posimyththemes
Software Website theplusaddons.com
Software Downloads 6,157,192
Software Active Installs 100,000
Software Record Last Updated July 13, 2026

Showing 1-20 of 41 Vulnerabilities

Submit a Vulnerability
The Plus Addons for Elementor <= 6.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'carousel_direction' Parameter
6.4
CVE-2026-9243
May 28, 2026
Researcher: João Pedro Soares de Alcântara
The Plus Addons for Elementor <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom Attributes
6.4
CVE-2026-15285
May 21, 2026
Researcher: theviper17y
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE ID Unknown
May 21, 2026
Researcher: theviper17y
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE ID Unknown
May 21, 2026
Researcher: theviper17y
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Lite Widget
6.4
CVE-2026-5243
May 13, 2026
Researcher: daroo
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar
6.4
CVE-2026-3311
Apr 7, 2026
Researcher: Osvaldo Noe Gonzalez Del Rio (Os)
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Unauthenticated Email Relay
5.3
CVE-2026-2385
Feb 21, 2026
Researcher: Quốc Huy (jtwings)
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Incorrect Authorization to Authenticated (Author+) Arbitrary Draft Post Creation via 'post_type'
4.3
CVE-2026-2386
Feb 18, 2026
Researcher: Dmitrii Ignatyev
The Plus Addons for Elementor <= 6.3.15 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
6.4
CVE-2025-9698
Sep 22, 2025
Researcher: Tan Nguyen
The Plus Addons for Elementor Page Builder Lite <= 6.3.13 - Missing Authorization
4.3
CVE-2025-55712
Aug 14, 2025
Researcher: Peter Thaleikis
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-7646
Jul 31, 2025
Researcher: zer0gh0st
The Plus Addons for Elementor Page Builder Lite <= 6.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-49076
May 30, 2025
Researcher: João Pedro Soares de Alcântara
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
6.4
CVE-2025-1287
Mar 7, 2025
Researcher: zer0gh0st
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-11829
Jan 31, 2025
Researcher: zer0gh0st
The Plus Addons for Elementor Page Builder Lite <= 5.6.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-53823
Dec 2, 2024
Researcher: wesley (wcraft)
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
4.3
CVE-2024-10365
Nov 19, 2024
Researcher: Ankit Patel
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via content_template
4.3
CVE-2024-8913
Oct 10, 2024
Researcher: Ankit Patel
The Plus Addons for Elementor Page Builder Lite <= 5.6.2 - Authenticated (Author+) Stored Cross-Site Scripting
6.4
CVE-2024-43977
Aug 28, 2024
Researcher: Michael
The Plus Addons for Elementor Page Builder Lite <= 5.6.2 - Missing Authorization
4.3
CVE-2024-43932
Aug 26, 2024
Researcher: Rafie Muhammad
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget Settings
6.4
CVE-2024-5583
Aug 21, 2024
Researcher: Ngô Thiên An (ancorn_)
Title Status CVE ID CVSS Researchers Date
The Plus Addons for Elementor <= 6.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'carousel_direction' Parameter Patched CVE-2026-9243 6.4 João Pedro Soares de Alcântara May 28, 2026
The Plus Addons for Elementor <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom Attributes Patched CVE-2026-15285 6.4 theviper17y May 21, 2026
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched 6.4 theviper17y May 21, 2026
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched 6.4 theviper17y May 21, 2026
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Lite Widget Patched CVE-2026-5243 6.4 daroo May 13, 2026
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar Patched CVE-2026-3311 6.4 Osvaldo Noe Gonzalez Del Rio (Os) April 7, 2026
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Unauthenticated Email Relay Patched CVE-2026-2385 5.3 Quốc Huy (jtwings) February 21, 2026
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Incorrect Authorization to Authenticated (Author+) Arbitrary Draft Post Creation via 'post_type' Patched CVE-2026-2386 4.3 Dmitrii Ignatyev February 18, 2026
The Plus Addons for Elementor <= 6.3.15 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Patched CVE-2025-9698 6.4 Tan Nguyen September 22, 2025
The Plus Addons for Elementor Page Builder Lite <= 6.3.13 - Missing Authorization Patched CVE-2025-55712 4.3 Peter Thaleikis August 14, 2025
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-7646 6.4 zer0gh0st July 31, 2025
The Plus Addons for Elementor Page Builder Lite <= 6.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-49076 6.4 João Pedro Soares de Alcântara May 30, 2025
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets Patched CVE-2025-1287 6.4 zer0gh0st March 7, 2025
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-11829 6.4 zer0gh0st January 31, 2025
The Plus Addons for Elementor Page Builder Lite <= 5.6.14 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-53823 6.4 wesley (wcraft) December 2, 2024
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates Patched CVE-2024-10365 4.3 Ankit Patel November 19, 2024
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via content_template Patched CVE-2024-8913 4.3 Ankit Patel October 10, 2024
The Plus Addons for Elementor Page Builder Lite <= 5.6.2 - Authenticated (Author+) Stored Cross-Site Scripting Patched CVE-2024-43977 6.4 Michael August 28, 2024
The Plus Addons for Elementor Page Builder Lite <= 5.6.2 - Missing Authorization Patched CVE-2024-43932 4.3 Rafie Muhammad August 26, 2024
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget Settings Patched CVE-2024-5583 6.4 Ngô Thiên An (ancorn_) August 21, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation