Essential Addons for Elementor Pro

Essential Addons for Elementor Pro has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 5 are fixed as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 7.3 out of 10. Severity breakdown: 0 critical and 1 high. 2024 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (80%). Other recurring categories include Server-Side Request Forgery (SSRF).

Every one of the 5 issues recorded for Essential Addons for Elementor Pro has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (2) reported by Rafie Muhammad.

Strategic Overview

Avg CVSSMedium

6.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Essential Addons for Elementor Pro vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.3CVE-2023-32245

Essential Addons for Elementor Pro <= 5.4.8 - Unauthenticated Server-Side Request Forgery

Read the full analysis

Vulnerability Records

5 records


2024-06-06 16:18	Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lightbox and Modal Widget Essential Addons for Elementor Pro <= 5.8.15	`CVE-2024-5612`	6.4 Medium	wesley (wcraft)	Yes
2024-05-28 19:01	Essential Addons for Elementor PRO – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Carousel Widget Essential Addons for Elementor Pro <= 5.8.14	`CVE-2024-5086`	6.4 Medium	wesley (wcraft)	Yes
2024-04-19 00:00	Essential Addons for Elementor Pro <= 5.8.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_html_tag' Essential Addons for Elementor Pro <= 5.8.11	`CVE-2024-3645`	6.4 Medium	Ngô Thiên An (ancorn_)	Yes
2023-05-15 00:00	Essential Addons for Elementor Pro <= 5.4.8 - Unauthenticated Server-Side Request Forgery Essential Addons for Elementor Pro <= 5.4.8	`CVE-2023-32245`	7.3 High	Rafie Muhammad	Yes
2023-05-15 00:00	Essential Addons for Elementor Pro <= 5.4.8 - Reflected Cross-Site Scripting Essential Addons for Elementor Pro <= 5.4.8	`CVE-2023-32241`	6.1 Medium	Rafie Muhammad	Yes

Showing 1–5 of 5 reports