WordPress Vulnerability Scanner WPSec
Vulnerabilities / Element Pack Addons for Elementor – MCP & AI-Ready Elementor Widgets, Elementor Templates, Elementor Addons

Element Pack Addons for Elementor – MCP & AI-Ready Elementor Widgets, Elementor Templates, Elementor Addons vulnerabilities

Advisories WPSec published for Element Pack Addons for Elementor – MCP & AI-Ready Elementor Widgets, Elementor Templates, Elementor Addons. Other sources may list more. Its attack surface: Element Pack Addons for Elementor – MCP & AI-Ready Elementor Widgets, Elementor Templates, Elementor Addons on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-15 WPSEC-2026-1029 Element Pack Addons for Elementor – MCP & AI-Ready Elementor Widgets, Elementor Templates, Elementor Addons <= 8.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Image Widget and UIkit Component HTML Medium 6.4 10.0.0
2026-10-15 WPSEC-2026-1028 Element Pack Addons for Elementor – MCP & AI-Ready Elementor Widgets, Elementor Templates, Elementor Addons <= 8.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via UIkit Component Attributes (Content Guard Bypass) Medium 6.4 10.0.0
2026-10-12 WPSEC-2026-0784 Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons <= 8.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Compare and Image Accordion Widget Settings Medium 6.4 8.8.8
2026-10-07 WPSEC-2026-0492 Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons <= 8.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Cursor Effects Settings Medium 6.4 8.8.7
2026-10-07 WPSEC-2026-0491 Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons <= 8.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Creative Button Widget 'button_css_id' Setting Medium 6.4 8.8.7
2026-10-07 WPSEC-2026-0490 Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons <= 8.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via UIkit Component Attributes Medium 6.4 8.8.7

License: CC BY 4.0