Log in Start free

nalam-1

Products

ProductCVEsExploitedLatest
Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library )4–Jul 29, 2025
AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot1–Oct 28, 2026
Magical Posts Display – Elementor Advanced Posts widgets1–Dec 12, 2025
Magical Shop Builder – WooCommerce Template Builder for Elementor | Shop, Cart, Checkout & Product Page Builder1–Nov 21, 2025

Exploited and recent CVEs

  • CVE-2026-109999 High 7.2 AI Marketing Expert <= 1.2.8 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'name' Parameter 0.3%
  • CVE-2025-12965 Medium 6.4 Magical Posts Display <= 1.2.54 - Authenticated (Author+) Stored Cross-Site Scripting via Magical Posts Accordion Widget 0.2%
  • CVE-2025-12964 Medium 6.4 Magical Products Display <= 1.1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via MPD Pricing Table Widget 0.2%
  • CVE-2025-8196 Medium 6.4 Magical Addons For Elementor <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes 0.3%
  • CVE-2024-10352 Medium 4.3 Magical Addons For Elementor <= 1.2.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template 0.3%
  • CVE-2024-5161 Medium 6.4 Magical Addons For Elementor <= 1.1.39 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-2923 Medium 6.4 Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) <= 1.1.37 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Effect Widget 0.3%