Log in Start free

Xpro

Products

ProductCVEsExploitedLatest
Xpro Addons — 140+ Widgets for Elementor14–Aug 5, 2026
Xpro Elementor Addons9–Oct 22, 2026
Xpro Addons For Beaver Builder – Lite2–Mar 13, 2026
Xpro Theme Builder2–Aug 27, 2025

Exploited and recent CVEs

  • CVE-2026-114177 High 8.8 WordPress Xpro Elementor Addons plugin <= 1.7.10 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2026-7105 Medium 4.3 Xpro Addons <= 1.5.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Creation via get_menu_content_editor() Function 0.4%
  • CVE-2026-11614 Medium 6.4 Xpro Addons <= 1.7.2 - Authenticated (Author+) Stored Cross-Site Scripting via 'custom_attributes' Parameter of Multiple Widgets 0.4%
  • CVE-2025-15369 Medium 5.3 Xpro Addons — 140+ Widgets for Elementor <= 1.5.0 - Missing Authorization to Unauthenticated Xpro Template Creation 0.2%
  • CVE-2026-45214 High 8.5 WordPress Xpro Elementor Addons plugin <= 1.5.1 - SQL Injection vulnerability 0.2%
  • CVE-2025-13368 Medium 6.4 Xpro Addons — 140+ Widgets for Elementor <= 1.4.20 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2026-2949 Medium 6.4 Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Box Widget 0.2%
  • CVE-2026-32395 Medium 5.3 WordPress Xpro Addons For Beaver Builder – Lite plugin <= 1.5.6 - Broken Access Control vulnerability 0.2%
  • CVE-2025-14149 Medium 6.4 Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Scroller Widget box link 0.2%
  • CVE-2025-69312 Critical 9.1 WordPress Xpro Elementor Addons plugin <= 1.4.19.1 - Arbitrary File Upload vulnerability 0.4%
  • CVE-2025-63044 Medium 6.5 WordPress Xpro Elementor Addons plugin <= 1.4.19.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-58198 Medium 6.5 WordPress Xpro Theme Builder Plugin <= 1.2.9 - Broken Access Control Vulnerability 0.2%
  • CVE-2025-58195 Medium 6.5 WordPress Xpro Elementor Addons Plugin <= 1.4.17 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-48232 Medium 6.5 WordPress Xpro Addons For Beaver Builder – Lite plugin <= 1.5.5 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-32201 Medium 4.3 WordPress Xpro Theme Builder Plugin <= 1.2.8.4 - Broken Access Control vulnerability 0.5%
  • CVE-2025-32163 Medium 6.5 WordPress Xpro Elementor Addons plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2025-2108 Medium 6.4 140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Site Title' widget 0.3%
  • CVE-2024-13649 Medium 6.4 140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-12584 Medium 4.3 140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.2 - Authenticated (Contributor+) Post Disclosure via Post Duplication 0.4%
  • CVE-2024-54253 Medium 6.5 WordPress Xpro Addons For Elementor plugin <= 1.4.6.5 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-10319 Medium 4.3 140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template 0.3%
  • CVE-2024-7791 Medium 6.4 140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Grid Widget 0.3%
  • CVE-2024-43150 Medium 6.5 WordPress Xpro Elementor Addons plugin <= 1.4.4.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-4471 High 8.0 140+ Widgets | Best Addons For Elementor – FREE <= 1.4.3.1 - Authenticated (Contributor+) PHP Object Injection 0.6%
  • CVE-2024-4440 Medium 6.4 140+ Widgets | Best Addons For Elementor – FREE <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets 0.4%
  • CVE-2024-34570 Medium 5.9 WordPress Xpro Elementor Addons plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-2250 Medium 6.4 130+ Widgets | Best Addons For Elementor – FREE <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%