Log in Start free

Webangon

Products

ProductCVEsExploitedLatest
The Pack Elementor addons9–Apr 24, 2025
News Element Elementor Blog Magazine2–Feb 19, 2026
The Pack Elementor addon2–Sep 30, 2025
XLTab – Accordions and Tabs for Elementor Page Builder2–Dec 6, 2024

Exploited and recent CVEs

  • CVE-2026-2284 Medium 5.4 News Element Elementor Blog Magazine <= 1.0.8 - Missing Authorization to Authenticated (Subscriber+) Data Loss 0.2%
  • CVE-2025-8214 Medium 6.4 The Pack Elementor addon <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typing Letter Widget 0.2%
  • CVE-2025-6550 Medium 6.4 The Pack Elementor addon <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2025-46472 Medium 6.5 WordPress The Pack Elementor addons plugin <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-32191 Medium 6.5 WordPress News Element Elementor Blog Magazine plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2025-30925 Medium 6.5 WordPress The Pack Elementor addons plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-30845 High 7.5 WordPress The Pack Elementor addons plugin <= 2.1.1 - Local File Inclusion vulnerability 1.1%
  • CVE-2024-10689 Medium 4.3 XLTab – Accordions and Tabs for Elementor Page Builder <= 1.4 - Authenticated (Contributor+) Post Disclosure 0.3%
  • CVE-2024-52356 Medium 6.5 WordPress The Pack Elementor addons plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-50453 High 7.5 WordPress The Pack Elementor addons plugin <= 2.0.9 - Local File Inclusion vulnerability 0.6%
  • CVE-2024-47375 Medium 6.5 WordPress XLTab – Accordions and Tabs for Elementor Page Builder plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-47383 Medium 5.9 WordPress The Pack Elementor addons plugin 2.0.8.8 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-38768 Medium 4.3 WordPress The Pack Elementor addons plugin <= 2.0.8.6 - Local File Inclusion vulnerability 0.5%
  • CVE-2024-32785 High 7.1 WordPress The Pack Elementor addons plugin <= 2.0.8.3 - Cross Site Request Forgery (CSRF) to XSS vulnerability 0.3%
  • CVE-2024-32718 Medium 4.9 WordPress The Pack Elementor addons plugin <= 2.0.8.2 - Server Side Request Forgery (SSRF) vulnerability 0.3%