Prime Elementor Addons – Lightweight Elementor Widgets for Faster Pages

Prime Elementor Addons – Lightweight Elementor Widgets for Faster Pages has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 4 are fixed as of August 2026. Their average CVSS score is 4.8, and the most serious one scores 6.4 out of 10. 2022 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting.

Every one of the 4 issues recorded for Prime Elementor Addons – Lightweight Elementor Widgets for Faster Pages has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

4.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Prime Elementor Addons – Lightweight Elementor Widgets for Faster Pages vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2026-8677

Prime Elementor Addons <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget HTML Tag Settings

Read the full analysis

Vulnerability Records

4 records


2026-06-08 19:49	Prime Elementor Addons <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget HTML Tag Settings Prime Elementor Addons <= 1.3.3	`CVE-2026-8677`	6.4 Medium	Romain Deperne (ang3L)	Yes
2024-04-11 00:00	Appsero <= 2.0.0 - Missing Authorization via handle_optin_optout Prime Elementor Addons <= 1.0.4	`CVE-2024-32110`	4.3 Medium	Dhabaleshwar Das	Yes
2022-12-16 00:00	Appsero <= 1.2.1 - Missing Authorization Prime Elementor Addons <= 1.0.1	`N/A`	4.3 Medium	Anonymous	Yes
2022-12-14 00:00	Appsero <= 1.2.0 - Cross-Site Request Forgery Prime Elementor Addons <= 1.0.1	`CVE-2022-47150`	4.3 Medium	István Márton	Yes

Showing 1–4 of 4 reports