Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin

Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 5 are fixed as of October 2026. Their average CVSS score is 6.5, and the most serious one scores 9.9 out of 10. Severity breakdown: 1 critical and 1 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery, behind 1 of the records (20%). Other recurring categories include Improper Control Of Filename For Include/Require Statement In PHP Program, Improper Limitation Of A Pathname To A Restricted Directory.

Every one of the 5 issues recorded for Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (3) reported by Rafie Muhammad.