Log in Start free

NicheAddons

Products

ProductCVEsExploitedLatest
Events Addon for Elementor8–May 1, 2026
Restaurant & Cafe Addon for Elementor6–May 1, 2026
Primary Addon for Elementor6–May 1, 2026
Medical Addon for Elementor3–Aug 2, 2025
Charity Addon for Elementor3–Dec 3, 2024
Education Addon for Elementor1–Feb 19, 2025
Sales Page Addon – Elementor & Beaver Builder1–Nov 9, 2024

Exploited and recent CVEs

  • CVE-2024-13362 Medium 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
  • CVE-2024-13362 Medium 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
  • CVE-2024-13362 Medium 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
  • CVE-2025-8150 Medium 6.4 Events Addon for Elementor <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter and Countdown Widgets 0.2%
  • CVE-2025-8212 Medium 6.4 Medical Addon for Elementor <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter Widget 0.3%
  • CVE-2024-13854 Medium 4.3 Education Addon for Elementor <= 1.3.1 - Authenticated (Contributor+) Insecure Direct Object Reference via naedu_elementor_template Shortcode 0.3%
  • CVE-2024-12046 Medium 4.3 Medical Addon for Elementor <= 1.6.2 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode 0.4%
  • CVE-2024-12061 Medium 4.3 Events Addon for Elementor <= 2.2.3 - Authenticated (Contributor+) Post Disclosure 0.4%
  • CVE-2024-54316 Medium 6.5 WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.8 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-54315 Medium 6.5 WordPress Events Addon for Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-54314 Medium 6.5 WordPress Primary Addon for Elementor plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2023-47826 Medium 6.5 WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.3 - Broken Access Control vulnerability 0.5%
  • CVE-2024-12062 Medium 4.3 Charity Addon for Elementor <= 1.3.3 - Authenticated (Contributor+) Post Disclosure 0.3%
  • CVE-2024-10780 Medium 4.3 Restaurant & Cafe Addon for Elementor <= 1.5.9 - Authenticated (Contributor+) Post Disclosure 0.4%
  • CVE-2024-10670 Medium 4.3 Primary Addon for Elementor <= 1.6.2 - Authenticated (Contributor+) Post Disclosure 0.4%
  • CVE-2024-51938 Medium 6.5 WordPress Charity Addon for Elementor plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-51581 Medium 6.5 WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-51585 Medium 6.5 WordPress Sales Page Addon plugin <= 1.4.5 - Stored Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-49259 Medium 6.5 WordPress Primary Addon for Elementor plugin <= 1.5.8 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-49264 Medium 6.5 WordPress Events Addon for Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2022-4974 Medium 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks 0.4%
  • CVE-2024-44024 Medium 6.5 WordPress Medical Addon for Elementor plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-44026 Medium 6.5 WordPress Charity Addon for Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-44032 Medium 6.5 WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-44033 Medium 6.5 WordPress Primary Addon for Elementor plugin <= 1.5.7 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-4669 Medium 6.4 Events Addon for Elementor <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets 0.3%
  • CVE-2024-5229 Medium 6.4 Primary Addon for Elementor <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget 0.3%
  • CVE-2023-47827 Medium 6.5 WordPress Events Addon for Elementor Plugin <= 2.1.3 is vulnerable to Broken Access Control 0.5%