WPBITS Addons For Elementor Page Builder

WPBITS Addons For Elementor Page Builder has 11 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; 9 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 5 disclosures.

The most common weakness is Cross-Site Scripting, behind 10 of the records (91%). Other recurring categories include Missing Authorization.

9 of the records (82%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2026.

8 independent researchers contributed these findings, most of them (2) reported by Francesco Carlucci. WPBITS Addons For Elementor Page Builder is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

01234567891018.02.2020Today04.03.20226.3Freemius SDK <= 2.4.2 - Missing Authorization Checks CVSS 6.3 · 04.03.202219.03.20246.4WPBITS Addons For Elementor Page Builder <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 19.03.202416.04.20246.4WPBITS Addons For Elementor Page Builder <= 1.3.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 16.04.202408.07.20246.4WPBITS Addons For Elementor Page Builder <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets CVSS 6.4 · 08.07.202410.07.20246.4WPBITS Addons For Elementor Page Builder <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 10.07.202403.12.20246.4WPBITS Addons For Elementor Page Builder <= 1.5.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVSS 6.4 · 03.12.202403.01.20256.4WPBITS Addons For Elementor Page Builder <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 03.01.202506.01.20256.4WPBITS Addons For Elementor Page Builder <= 1.5.1 - Authenticated (Author+) Stored Cross-Site Scripting CVSS 6.4 · 06.01.202527.01.20266.4WPBITS Addons For Elementor <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 27.01.202601.03.20266.4WPBITS Addons For Elementor Page Builder <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 01.03.202630.04.20266.1Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter CVSS 6.1 · 30.04.2026

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage82%
Open

2

Fixed

9

Get automatic notifications for all WPBITS Addons For Elementor Page Builder vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2026-39703

WPBITS Addons For Elementor Page Builder <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

11 records
2026-04-30 17:17CVE-2024-13362
6.1
Medium
Asaf MozesNo
2026-03-01 00:00CVE-2026-39703
6.4
Medium
Abu Hurayra (HurayraIIT)No
2026-01-27 17:39CVE-2025-9082
6.4
Medium
zer0gh0stYes
2025-01-06 00:00CVE-2025-22316
6.4
Medium
MichaelYes
2025-01-03 00:00CVE-2024-56285
6.4
Medium
Robert DeVoreYes
2024-12-03 21:28CVE-2024-8962
6.4
Medium
Francesco CarlucciYes
2024-07-10 00:00CVE-2024-37945
6.4
Medium
MichaelYes
2024-07-08 22:00CVE-2024-4862
6.4
Medium
stealthcopterYes
2024-04-16 00:00CVE-2024-32593
6.4
Medium
KhalidYes
2024-03-19 00:00CVE-2024-2129
6.4
Medium
Francesco CarlucciYes
Showing 1–10 of 11 reports
WPBITS Addons For Elementor Page Builder banner
Latestv1.8.1

WPBITS Addons For Elementor Page Builder

WPBits

Author

WPBits

5.0(2)
100/100
Last Updated
2026-01-19 (8mo ago)
Active Installs
2,000+
Downloads
25,633
Requires WP
5.6+
Requires PHP
5.4+
Tested up to
WP 6.7.7
Created
2020-02-18 (7y ago)

25 FREE WIDGETS and 60+ READY TO USE FREE TEMPLATES The plugin comes with the following Elementor addons; Advanced Accordion – DEMO Banner Designer – DEMO Business Hours – DEMO Advanced Button – DEMO Contact Form 7 – DEMO Countdown – DEMO Counter – DEMO Dropdown Button – DEMO Advanced Heading – DEMO Login Form – DEMO Photo Gallery – DEMO Piechart – DEMO Price Menu – DEMO Price Table – DEMO Progress Bar – DEMO Custom Shape – DEMO Advanced Tabs – DEMO Team Member – DEMO Text Rotator – DEMO Advanced Tooltip – DEMO Logo Grid – DEMO Image Compare – DEMO Testimonial – DEMO Timelines – DEMO Hotspots – DEMO Icon Box Pro Widgets & Features Slider – DEMO Reveal Effects – DEMO WooCommerce Carousel Master – DEMO WooCommerce Grid Master – DEMO Carousel Master – DEMO Grid Master – DEMO Scroll Effects – DEMO CSS Animations – DEMO Image Effects – DEMO Parallax Effects – DEMO One Page Navigation – DEMO Flip Box – DEMO Site Navigation – DEMO Decorative Slideshows – DEMO Theme Builder – DEMO

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C