The Plus Addons for Elementor Page Builder Pro

The Plus Addons for Elementor Page Builder Pro has 13 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2025; all 13 are fixed as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 9.8 out of 10. Severity breakdown: 3 critical and 3 high. 2021 was the busiest year with 7 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (23%). Other recurring categories include Missing Authorization, Open Redirect.

Every one of the 13 issues recorded for The Plus Addons for Elementor Page Builder Pro has a vendor fix available, so running the current release closes all known holes.

6 independent researchers contributed these findings, most of them (4) reported by Nicolas Vidal.

Strategic Overview

Avg CVSSHigh

7.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all The Plus Addons for Elementor Page Builder Pro vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2023-47178

The Plus Addons for Elementor Pro <= 5.2.8 - Unauthenticated Local File Inclusion

Read the full analysis

Vulnerability Records

13 records


2025-07-16 00:00	The Plus Addons for Elementor Pro < 6.3.7 - Missing Authorization The Plus Addons for Elementor Page… < 6.3.7	`CVE-2025-46434`	4.3 Medium	Rafie Muhammad	Yes
2025-05-20 00:00	The Plus Addons for Elementor Pro <= 6.3.6 - Missing Authorization The Plus Addons for Elementor Page… <= 6.3.6	`CVE-2025-46259`	4.3 Medium	Rafie Muhammad	Yes
2024-06-20 14:04	The Plus Addons for Elementor Page Builder <= 5.5.6 - Reflected Cross-Site Scripting via WP Login and Register Widget The Plus Addons for Elementor Page… <= 5.5.6	`CVE-2024-5344`	6.1 Medium	wesley (wcraft)	Yes
2024-06-20 00:00	The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.6 - Authenticated (Contributor+) Local File Inclusion The Plus Addons for Elementor Page… <= 5.5.6	`CVE-2024-5455`	8.8 High	wesley (wcraft)	Yes
2024-05-29 17:11	The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Title Widget The Plus Addons for Elementor Page… <= 5.5.4	`CVE-2024-5341`	6.4 Medium	wesley (wcraft)	Yes
2023-10-31 00:00	The Plus Addons for Elementor Pro <= 5.2.8 - Unauthenticated Local File Inclusion The Plus Addons for Elementor Page… <= 5.2.8	`CVE-2023-47178`	9.8 Critical	Rafie Muhammad	Yes
2021-12-13 00:00	The Plus Addons for Elementor Pro <= 5.0.6 - Sensitive Data Disclosure The Plus Addons for Elementor Page… < 5.0.7	`CVE-2021-24948`	7.5 High	Nicolas Vidal	Yes
2021-12-13 00:00	The Plus Addons for Elementor - Pro <= 5.0.6 - SQL Injection The Plus Addons for Elementor Page… < 5.0.7	`CVE-2021-24949`	9.8 Critical	Nicolas Vidal	Yes
2021-05-31 00:00	The Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect The Plus Addons for Elementor Page… < 4.1.10	`CVE-2021-24358`	6.1 Medium	Nicolas Vidal	Yes
2021-05-31 00:00	The Plus Addons for Elementor Page Builder <= 4.1.10 - Open Redirect The Plus Addons for Elementor Page… < 4.1.11	`CVE-2021-24359`	5.3 Medium	Nicolas Vidal	Yes

Showing 1–10 of 13 reports