wowDevs

Products

ProductCVEsExploitedLatest
Sky Addons – Elementor Addons with Widgets & Templates6–May 8, 2026
Sky Addons for Elementor5–Sep 11, 2026

Exploited and recent CVEs

  • CVE-2026-62109 High 7.6 WordPress Sky Addons for Elementor plugin <= 3.8.4 - SQL Injection vulnerability 0.4%
  • CVE-2026-7475 Medium 6.4 Sky Addons <= 3.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Script 0.2%
  • CVE-2025-8216 Medium 6.4 Sky Addons for Elementor <= 3.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets 0.3%
  • CVE-2025-46260 Medium 6.5 WordPress Sky Addons for Elementor plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-11601 High 8.1 Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) <= 2.6.1 - Cross-Site Request Forgery to Limited Arbitrary Options Update 0.3%
  • CVE-2024-11104 High 8.1 Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) <= 2.6.2 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update 0.7%
  • CVE-2024-9542 Medium 4.3 Sky Addons for Elementor <= 2.6.1 - Authenticated (Contributor+) Sensitive Information Exposure via Content Switcher Widget Elementor Template 0.3%
  • CVE-2024-50433 Medium 6.5 WordPress Sky Addons for Elementor plugin <= 2.5.15 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-47332 Medium 6.5 WordPress Sky Addons for Elementor plugin <= 2.5.11 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-38687 Medium 6.5 WordPress Sky Addons for Elementor plugin <= 2.5.5 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-2286 Medium 6.4 Sky Addons for Elementor <= 2.4.0 - Authenticated(Contributor+) Stored Cross-site scripting via Wrapper Link URL 0.4%