IdeaBox Creations
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| PowerPack Addons for Elementor | 4 | – | Oct 22, 2026 |
| PowerPack Lite for Beaver Builder | 3 | – | Oct 18, 2026 |
| PowerPack Pro for Elementor | 2 | – | Dec 23, 2025 |
| Dashboard Welcome for Beaver Builder | 1 | – | Jan 8, 2026 |
| PowerPack for Beaver Builder | 1 | – | Aug 18, 2024 |
Exploited and recent CVEs
- CVE-2026-114182 WordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Broken Access Control vulnerability 0.2%
- CVE-2026-110897 WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-111400 WordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability 0.1%
- CVE-2026-108488 WordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability 0.1%
- CVE-2026-32430 WordPress PowerPack Addons for Elementor plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-22488 WordPress Dashboard Welcome for Beaver Builder plugin <= 1.0.8 - Broken Access Control vulnerability 0.2%
- CVE-2024-24844 WordPress PowerPack Pro for Elementor plugin <= 2.10.6 - Unauthenticated Plugin Settings Reset vulnerability 0.3%
- CVE-2024-43330 WordPress PowerPack for Beaver Builder plugin < 2.37.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-37409 WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.4 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-37410 WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.3 - Local File Inclusion vulnerability 0.6%
- CVE-2023-49739 WordPress PowerPack Pro for Elementor plugin <= 2.9.23 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%