WordPress Vulnerability Scanner WPSec
Vulnerabilities / Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates

Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates vulnerabilities

Advisories WPSec published for Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates. Other sources may list more. Its attack surface: Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-15 WPSEC-2026-1003 Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates <= 4.11.111 - Unauthenticated Sensitive Information Exposure via Search Form 'post_type' Parameter Medium 5.3 4.11.112
2026-10-15 WPSEC-2026-1002 Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates <= 4.11.111 - Authenticated (Subscriber+) Missing Authorization to Post Title Disclosure via 'premium_update_filter' AJAX Action Medium 4.3 4.11.112
2026-10-15 WPSEC-2026-1001 Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates <= 4.11.111 - Authenticated (Contributor+) Stored Cross-Site Scripting via Media Wheel and Media Grid Lightbox URLs Medium 6.4 4.11.112
2026-10-15 WPSEC-2026-1000 Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates <= 4.11.111 - Authenticated (Contributor+) Missing Authorization to Post Publishing via Change Post Status Ability Low 3.1 4.11.112
2026-10-15 WPSEC-2026-0999 Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates <= 4.11.111 - Unauthenticated Sensitive Information Exposure of Password-Protected Products via Woo Products Quick View Medium 5.3 4.11.112
2026-10-11 WPSEC-2026-0765 Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates <= 4.11.110 - Authenticated (Contributor+) Stored Cross-Site Scripting via Google Maps Widget Cluster Icon Medium 6.4 4.11.111
2026-10-02 WPSEC-2026-0327 Premium Addons for Elementor <= 4.11.109 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Box Widget Medium 6.4 4.11.110
2026-10-02 WPSEC-2026-0224 Premium Addons for Elementor <= 4.11.105 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Box Widget 'preload' Setting Medium 6.4 4.11.106

License: CC BY 4.0