pencilwp

Products

ProductCVEsExploitedLatest
X Addons for Elementor4–Jan 23, 2026

Exploited and recent CVEs

  • CVE-2026-24605 Medium 4.3 WordPress X Addons for Elementor plugin <= 1.0.23 - Broken Access Control vulnerability 0.3%
  • CVE-2026-22518 Medium 6.5 WordPress X Addons for Elementor plugin <= 1.0.23 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-9204 Medium 6.4 X Addons for Elementor <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Youtube Video ID Field 0.2%
  • CVE-2025-48132 Medium 6.5 WordPress X Addons for Elementor plugin <= 1.0.16 - Cross Site Scripting (XSS) Vulnerability 0.2%