WPBITS Addons For Elementor Page Builder
WPBITS Addons For Elementor Page Builder has 11 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; 9 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 5 disclosures.
The most common weakness is Cross-Site Scripting, behind 10 of the records (91%). Other recurring categories include Missing Authorization.
9 of the records (82%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2026.
8 independent researchers contributed these findings, most of them (2) reported by Francesco Carlucci. WPBITS Addons For Elementor Page Builder is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2026-39703WPBITS Addons For Elementor Page Builder <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

WPBITS Addons For Elementor Page Builder
Author
WPBits
25 FREE WIDGETS and 60+ READY TO USE FREE TEMPLATES The plugin comes with the following Elementor addons; Advanced Accordion – DEMO Banner Designer – DEMO Business Hours – DEMO Advanced Button – DEMO Contact Form 7 – DEMO Countdown – DEMO Counter – DEMO Dropdown Button – DEMO Advanced Heading – DEMO Login Form – DEMO Photo Gallery – DEMO Piechart – DEMO Price Menu – DEMO Price Table – DEMO Progress Bar – DEMO Custom Shape – DEMO Advanced Tabs – DEMO Team Member – DEMO Text Rotator – DEMO Advanced Tooltip – DEMO Logo Grid – DEMO Image Compare – DEMO Testimonial – DEMO Timelines – DEMO Hotspots – DEMO Icon Box Pro Widgets & Features Slider – DEMO Reveal Effects – DEMO WooCommerce Carousel Master – DEMO WooCommerce Grid Master – DEMO Carousel Master – DEMO Grid Master – DEMO Scroll Effects – DEMO CSS Animations – DEMO Image Effects – DEMO Parallax Effects – DEMO One Page Navigation – DEMO Flip Box – DEMO Site Navigation – DEMO Decorative Slideshows – DEMO Theme Builder – DEMO
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C