BrainStormForce Ultimate Addons for Elementor

• CVE-2026-15787 Medium 6.4 Ultimate Addons for Elementor <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Widget data-toggle-icon/data-close-icon Attributes 0.4%
• CVE-2025-8488 Medium 4.3 Ultimate Addons for Elementor (Formerly Elementor Header & Footer Builder) <= 2.4.6 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update 0.3%
• CVE-2024-11230 Medium 6.4 Elementor Header & Footer Builder <= 1.6.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title Widget 0.3%
• CVE-2024-10325 Medium 6.4 Elementor Header & Footer Builder <= 1.6.45 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
• CVE-2024-10050 Medium 4.3 Elementor Header & Footer Builder <= 1.6.43 - Authenticated (Contributor+) Information Disclosure via Shortcode 0.5%
• CVE-2024-5757 Medium 6.4 Elementor Header & Footer Builder <= 1.6.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Title Widget 0.4%
• CVE-2024-2618 Medium 6.4 Elementor Header & Footer Builder <= 1.6.26 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2024-2619 Medium 5.0 Elementor Header & Footer Builder <= 1.6.26 - Authenticated (Author+) HTML Injection 0.4%
• CVE-2024-4634 Medium 6.4 Elementor Header & Footer Builder <= 1.6.28 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
• CVE-2024-1237 Medium 6.4 Elementor Header & Footer Builder <= 1.6.24 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.5%