Premium Addons Pro for Elementor

Premium Addons Pro for Elementor has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 9 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 6 disclosures.

The most common weakness is Cross-Site Scripting, behind 7 of the records (78%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Missing Authorization.

Every one of the 9 issues recorded for Premium Addons Pro for Elementor has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (6) reported by wesley (wcraft).

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

9

Get automatic notifications for all Premium Addons Pro for Elementor vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-2239

Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Premium Magic Scroll Module

Read the full analysis

Vulnerability Records

9 records
2024-03-07 00:00CVE-2024-2239
6.4
Medium
wesley (wcraft)Yes
2024-03-07 00:00CVE-2024-2237
6.4
Medium
wesley (wcraft)Yes
2024-03-07 00:00CVE-2024-1997
6.4
Medium
wesley (wcraft)Yes
2024-03-07 00:00CVE-2024-2238
6.4
Medium
wesley (wcraft)Yes
2024-03-07 00:00CVE-2024-2000
6.4
Medium
wesley (wcraft)Yes
2024-03-06 00:00CVE-2024-1996
6.4
Medium
wesley (wcraft)Yes
2023-07-10 00:00CVE-2023-37869
5.4
Medium
AnonymousYes
2023-07-10 00:00CVE-2023-37868
5.3
Medium
Rafie MuhammadYes
2023-06-02 00:00CVE-2023-34012
6.1
Medium
Rafie MuhammadYes
Showing 1–9 of 9 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C