WordSec
WordSec

Premium Addons Pro for Elementor

Explore Premium Addons Pro for Elementor vulnerabilities across all versions. Currently tracking 9 known vulnerabilities, including severity, impact, and patch status.

01234567891002.06.2023Today02.06.20236.1Premium Addons PRO <= 2.8.24 - Reflected Cross-Site Scripting CVSS 6.1 · 02.06.202310.07.20235.4Premium Addons PRO <= 2.9.0 - Missing Authorization CVSS 5.4 · 10.07.20235.3Premium Addons PRO <= 2.9.0 - Sensitive Information Exposure CVSS 5.3 · 10.07.202306.03.20246.4Premium Addons for Elementor PRO <= 2.9.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget link CVSS 6.4 · 06.03.202407.03.20246.4Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Premium Magic Scroll Module CVSS 6.4 · 07.03.20246.4Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Global Badge Module CVSS 6.4 · 07.03.20246.4Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Messenger Chat Widget CVSS 6.4 · 07.03.20246.4Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Mouse Cursor Module CVSS 6.4 · 07.03.20246.4Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multi Scroll Widget CVSS 6.4 · 07.03.2024

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

9

Get automatic notifications for all Premium Addons Pro for Elementor vulnerabilities before they are exploited.

Vulnerability Records

9 records
2024-03-07 00:00
Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Premium Magic Scroll Module
Premium Addons Pro for Elementor
<= 2.9.12
CVE-2024-2239
6.4
Medium
wesley (wcraft)Yes
2024-03-07 00:00
Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Global Badge Module
Premium Addons Pro for Elementor
<= 2.9.12
CVE-2024-2237
6.4
Medium
wesley (wcraft)Yes
2024-03-07 00:00
Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Messenger Chat Widget
Premium Addons Pro for Elementor
<= 2.9.12
CVE-2024-1997
6.4
Medium
wesley (wcraft)Yes
2024-03-07 00:00
Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Mouse Cursor Module
Premium Addons Pro for Elementor
<= 2.9.12
CVE-2024-2238
6.4
Medium
wesley (wcraft)Yes
2024-03-07 00:00
Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multi Scroll Widget
Premium Addons Pro for Elementor
<= 2.9.12
CVE-2024-2000
6.4
Medium
wesley (wcraft)Yes
2024-03-06 00:00
Premium Addons for Elementor PRO <= 2.9.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget link
Premium Addons Pro for Elementor
<= 2.9.12
CVE-2024-1996
6.4
Medium
wesley (wcraft)Yes
2023-07-10 00:00
Premium Addons PRO <= 2.9.0 - Missing Authorization
Premium Addons Pro for Elementor
<= 2.9.0
CVE-2023-37869
5.4
Medium
AnonymousYes
2023-07-10 00:00
Premium Addons PRO <= 2.9.0 - Sensitive Information Exposure
Premium Addons Pro for Elementor
<= 2.9.0
CVE-2023-37868
5.3
Medium
Rafie MuhammadYes
2023-06-02 00:00
Premium Addons PRO <= 2.8.24 - Reflected Cross-Site Scripting
Premium Addons Pro for Elementor
<= 2.8.24
CVE-2023-34012
6.1
Medium
Rafie MuhammadYes
Showing 1–9 of 9 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C