WordPress plugin

Vertex Addons for Elementor security & vulnerabilities

Q: Is any Vertex Addons for Elementor vulnerability listed in CISA KEV?

No. None of the known Vertex Addons for Elementor vulnerabilities is currently listed in the CISA KEV catalog.

addons-for-elementor-builder— active installsLast vulnerability Apr 8, 2026

No known unpatched vulnerabilities in the latest version

All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

3Known vulnerabilities

Critical0
High1
Medium2
Low0

Vulnerabilities per year

All Vertex Addons for Elementor vulnerabilities

Vertex Addons for Elementor vulnerabilities
Severity	Vulnerability	CVE	Published
High8.8	Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation and Activation via 'afeb_activate_required_plugins' ≤1.6.4Update to 1.7.0	CVE-2026-4326	Apr 08
Medium4.3	Missing Authorization ≤1.6.4Update to 1.7.0	CVE-2026-25398	Mar 23
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.2.0Update to 1.3.0	CVE-2025-26769	Feb 14, 2025

High8.8
Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation and Activation via 'afeb_activate_required_plugins'
≤1.6.4Update to 1.7.0
CVE-2026-4326Apr 08
Medium4.3
Missing Authorization
≤1.6.4Update to 1.7.0
CVE-2026-25398Mar 23
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.2.0Update to 1.3.0
CVE-2025-26769Feb 14, 2025

Vertex Addons for Elementor: common questions

Does Vertex Addons for Elementor have known vulnerabilities?

Yes. VulnCrest Radar lists 3 known vulnerabilities in Vertex Addons for Elementor: 1 high, 2 medium. None are known to affect version null.

How do I check which version of Vertex Addons for Elementor I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Vertex Addons for Elementor vulnerability?

CVE-2026-4326, published Apr 8, 2026: Vertex Addons for Elementor <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation and Activation via 'afeb_activate_required_plugins'. Severity: High (CVSS 8.8).

Is any Vertex Addons for Elementor vulnerability listed in CISA KEV?

No. None of the known Vertex Addons for Elementor vulnerabilities is currently listed in the CISA KEV catalog.