WordPress plugin
Animation Addons – Elementor Addons, GSAP Animations, Elementor V4 Atomic Widgets & Elementor Templates security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium8
- Low0
All Animation Addons – Elementor Addons, GSAP Animations, Elementor V4 Atomic Widgets & Elementor Templates vulnerabilities
- High7.2Unauthenticated Server-Side Request Forgery
<2.7.2Update to 2.7.2
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
<2.7.0Update to 2.7.0
- Medium6.4Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Parameters
≤4.2.6Update to 4.2.7
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Weather Widget
≤2.6.3Update to 2.6.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.6.3Update to 2.6.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.6.3Update to 2.6.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.6.2No patch available
- Medium4.3Authenticated (Contributor+) Arbitrary Content Deletion
≤2.4.5Update to 2.4.6
- Medium4.3Authenticated (Contributor+) Sensitive Information Exposure via Content Slider and Tabs Widget Elementor Template
≤1.1.6Update to 1.1.7
Animation Addons – Elementor Addons, GSAP Animations, Elementor V4 Atomic Widgets & Elementor Templates: common questions
Does Animation Addons – Elementor Addons, GSAP Animations, Elementor V4 Atomic Widgets & Elementor Templates have known vulnerabilities?
Yes. VulnCrest Radar lists 9 known vulnerabilities in Animation Addons – Elementor Addons, GSAP Animations, Elementor V4 Atomic Widgets & Elementor Templates: 1 high, 8 medium. At least one is not fixed in the latest version.
How do I check which version of Animation Addons – Elementor Addons, GSAP Animations, Elementor V4 Atomic Widgets & Elementor Templates I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Animation Addons – Elementor Addons, GSAP Animations, Elementor V4 Atomic Widgets & Elementor Templates vulnerability?
CVE-2026-17565, published Aug 28, 2026: Animation Addons for Elementor – GSAP Motion Elementor Addons & Website Templates < 2.7.2 - Unauthenticated Server-Side Request Forgery. Severity: High (CVSS 7.2).
Is any Animation Addons – Elementor Addons, GSAP Animations, Elementor V4 Atomic Widgets & Elementor Templates vulnerability listed in CISA KEV?
No. None of the known Animation Addons – Elementor Addons, GSAP Animations, Elementor V4 Atomic Widgets & Elementor Templates vulnerabilities is currently listed in the CISA KEV catalog.