Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin
Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 4 are fixed as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 9.9 out of 10. Severity breakdown: 1 critical and 0 high. 2025 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (25%). Other recurring categories include Cross-Site Scripting, Missing Authorization.
Every one of the 4 issues recorded for Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, most of them (3) reported by Rafie Muhammad.
CVE-2024-33568Element Pack Pro <= 7.19.2 - Authenticated (Contributor+) Arbitrary File Read and PHAR Deserialization
Read the full analysisVulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C