Leap13

Premium Addons For Elementor

41 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2026-62078

  • EPSS 0.16%
  • Veröffentlicht 30.09.2026 12:26:46
  • Zuletzt bearbeitet 30.09.2026 14:17:28

Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions.

6.5

CVE-2026-94168

  • EPSS 0.17%
  • Veröffentlicht 23.09.2026 18:14:23
  • Zuletzt bearbeitet 23.09.2026 20:17:23

Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions.

4.9

CVE-2026-12141

  • EPSS 0.19%
  • Veröffentlicht 11.07.2026 03:44:24
  • Zuletzt bearbeitet 14.07.2026 15:16:56

The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'premium_tooltip_text' parameter in all versions up to, and including, 4.11.84 due to insufficient inp...

5.4

CVE-2026-4790

  • EPSS 0.19%
  • Veröffentlicht 02.05.2026 11:16:10
  • Zuletzt bearbeitet 05.05.2026 19:15:34

The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_svg' parameter in versions up to, and including, 4.11.70 due to insufficient input sanitizatio...

5.4

CVE-2025-69300

  • EPSS 0.21%
  • Veröffentlicht 22.01.2026 16:52:31
  • Zuletzt bearbeitet 27.04.2026 21:16:23

Missing Authorization vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premium Addons for Elementor: from n/a through <= 4.11....

5.3

CVE-2025-68494

  • EPSS 0.32%
  • Veröffentlicht 24.12.2025 12:31:19
  • Zuletzt bearbeitet 07.10.2026 13:10:00

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Premium Addons for Elementor: from...

4.3

CVE-2025-14163

  • EPSS 0.16%
  • Veröffentlicht 23.12.2025 09:20:01
  • Zuletzt bearbeitet 08.04.2026 18:24:08

The Premium Addons for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.11.53. This is due to missing nonce validation in the 'insert_inner_template' function. This makes it possible f...

5.3

CVE-2025-14155

  • EPSS 0.78%
  • Veröffentlicht 23.12.2025 09:19:59
  • Zuletzt bearbeitet 08.04.2026 17:20:24

The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_template_content' function in all versions up to, and including,...

5.4

CVE-2024-11937

  • EPSS 0.17%
  • Veröffentlicht 04.07.2025 07:22:18
  • Zuletzt bearbeitet 09.07.2025 17:44:13

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's linkURL in the Mobile Menu element in all versions up to, and including, 4.10.69 due to insufficient input sanitization and output esc...

5.4

CVE-2025-4774

  • EPSS 0.22%
  • Veröffentlicht 10.06.2025 11:22:51
  • Zuletzt bearbeitet 16.07.2025 16:24:29

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-countdown attribute of Countdown widget in all versions up to, and including, 4.11.8 due to insufficient input sanitization and output esc...