Log in Start free

litonice13

Products

ProductCVEsExploitedLatest
Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits15–Jun 6, 2026
WP Adminify – White Label WordPress, Admin Menu Editor, Login Customizer2–Jan 28, 2026
Image Comparison Addon for Elementor1–Nov 4, 2025
Admin Bar Editor – Toolbar Customization with User Role based access & Custom menus1–May 2, 2024
Master Blocks – Ultimate Gutenberg Blocks for Marketers1–Nov 4, 2025
Image Hover Effects for Elementor1–Nov 4, 2025
Content Locker for Elementor1–Nov 4, 2025

Exploited and recent CVEs

  • CVE-2026-9281 Medium 6.4 Master Addons For Elementor <= 3.1.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'jtlma_custom_js' Page Setting (Custom JS Extension) 0.2%
  • CVE-2024-13362 Medium 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
  • CVE-2026-2486 Medium 6.4 Master Addons For Elementor <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ma_el_bh_table_btn_text' 0.2%
  • CVE-2026-1060 Medium 5.3 WP Adminify <= 4.0.7.7 - Unauthenticated Sensitive Information Exposure via 'get-addons-list' REST API 0.3%
  • CVE-2025-10896 High 8.8 Multiple Plugins <= Multiple Versions - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload 0.7%
  • CVE-2025-10896 High 8.8 Multiple Plugins <= Multiple Versions - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload 0.7%
  • CVE-2025-10896 High 8.8 Multiple Plugins <= Multiple Versions - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload 0.7%
  • CVE-2025-10896 High 8.8 Multiple Plugins <= Multiple Versions - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload 0.7%
  • CVE-2025-8874 Medium 6.4 Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox 0.3%
  • CVE-2025-5284 Medium 6.4 Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
  • CVE-2025-0433 Medium 6.4 Master Addons <= 2.0.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter 0.3%
  • CVE-2024-9618 Medium 6.4 Master Addons <= 2.0.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets 0.3%
  • CVE-2024-9502 Medium 6.4 Master Addons -- Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip Module 0.4%
  • CVE-2024-8959 Medium 6.4 WP Adminify – Best WordPress Custom Dashboard Plugin <= 4.0.1.6 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.4%
  • CVE-2024-6282 Medium 5.4 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via data-jltma-wrapper-link Element 0.3%
  • CVE-2024-5382 Medium 6.5 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to MA Template Creation or Modification 0.3%
  • CVE-2024-5542 High 7.2 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via Navigation Menu Widget 0.3%
  • CVE-2024-3134 Medium 6.4 Master Addons for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-4580 Medium 6.4 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-1716 Medium 4.3 Admin Bar Remover <= 1.0.2.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update 0.4%
  • CVE-2024-4265 Medium 6.4 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.5.9 - Contributor+ Stored Cross-Site Scripting 0.6%
  • CVE-2024-2139 Medium 6.4 Master Addons for Elementor <= 2.0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget 0.3%