WPSHARE247 Elementor Addons
WPSHARE247 Elementor Addons has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for WPSHARE247 Elementor Addons has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Gab. WPSHARE247 Elementor Addons is installed on roughly 50 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.6.8.
CVE-2025-31813WPSHARE247 Elementor Addons <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

WPSHARE247 Elementor Addons
Author
Website366.com
Widgets (Wpshare247 Addons) for Elementor. Wpshare247 Addons for Elementor plugin includes widgets and addons like Blog Post, Products, Post, Page and Custom Post Type Grid or Carousel, Countdown, Contact Form 7, Vertical Mega Menu. Liên hệ – Contact Us Professional website design – Thiết kế website chuyên nghiệp: tbay.vn Web design – Thiết kế web trọn gói: website366.com Sample Website – Thiết kế web giá rẻ: waoweb.vn Wordpress Share – Học wordpress: wpshare247.com Web Content – Viết bài chăm sóc web: vietbaigiare.com Cách dùng filter thêm Custom Widget – How to use custom Widget 1. Copy folder wpshare247-custom-widgets from the plugin path: wpshare247-elementor-addons/your-custom-sample/wpshare247-custom-widgets into your current theme folder, like: wp-content/themes/your-theme/wpshare247-custom-widgets Inside that folder, you will find wpshare247_my_custom.php. This is a sample widget file. You can use it directly, or duplicate and create more widget files. In your theme’s functions.php, add the following code to register custom widgets: `php add_filter( ‘wpshare247_el_addons_custom_widgets’, function( $widgets ) { $widgets[] = [ ‘file’ => get_stylesheet_directory() . ‘/wpshare247-custom-widgets/wpshare247_my_custom.php’, ‘class’ => ‘Wpshare247_My_Custom’, ]; /* // Example: Add more widgets if needed $widgets[] = [ ‘file’ => get_stylesheet_directory() . ‘/wpshare247-custom-widgets/wpshare247_my_custom_new1.php’, ‘class’ => ‘Wpshare247_My_Custom_New1’, ]; */ return $widgets; });
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C