Premium Addons for Elementor
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Premium Addons Pro for Elementor | 6 | – | Mar 13, 2024 |
| Premium Addons PRO | 1 | – | Jun 23, 2023 |
Exploited and recent CVEs
- CVE-2024-2000 Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multi Scroll Widget 0.4%
- CVE-2024-2238 Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Mouse Cursor Module 0.4%
- CVE-2024-1997 Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Messenger Chat Widget 0.4%
- CVE-2024-1996 Premium Addons for Elementor PRO <= 2.9.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget link 0.4%
- CVE-2024-2237 Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Global Badge Module 0.4%
- CVE-2024-2239 Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Premium Magic Scroll Module 0.4%
- CVE-2023-34012 WordPress Premium Addons PRO Plugin <= 2.8.24 is vulnerable to Cross Site Scripting (XSS) 0.4%