WordPress plugin
Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 5 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High1
- Medium3
- Low0
All Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Authenticated (Contributor+) Local File Inclusion ≤9.0.6Update to 9.1.0 | CVE-2026-40721 | |
| Medium4.3 | Cross-Site Request Forgery ≤7.21.0Update to 8.0.0 | CVE-2025-46257 | |
| Medium4.3 | Missing Authorization ≤7.21.0Update to 8.0.0 | CVE-2025-46258 | |
| Medium6.4 | Addon for Elementor Page Builder WordPress Plugin <= 7.9.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link URL ≤7.9.0Update to 7.9.1 | CVE-2024-2455 | |
| Critical9.9 | Authenticated (Contributor+) Arbitrary File Read and PHAR Deserialization ≤7.19.2Update to 7.19.3 | CVE-2024-33568 |
- High7.5Authenticated (Contributor+) Local File Inclusion
≤9.0.6Update to 9.1.0
- Medium4.3Cross-Site Request Forgery
≤7.21.0Update to 8.0.0
- Medium4.3Missing Authorization
≤7.21.0Update to 8.0.0
- Medium6.4Addon for Elementor Page Builder WordPress Plugin <= 7.9.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link URL
≤7.9.0Update to 7.9.1
- Critical9.9Authenticated (Contributor+) Arbitrary File Read and PHAR Deserialization
≤7.19.2Update to 7.19.3
Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin: common questions
Does Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin have known vulnerabilities?
Yes. VulnCrest Radar lists 5 known vulnerabilities in Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin: 1 critical, 1 high, 3 medium. None are known to affect version null.
How do I check which version of Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin vulnerability?
CVE-2026-40721, published Jan 14, 2026: Element Pack Pro <= 9.0.6 - Authenticated (Contributor+) Local File Inclusion. Severity: High (CVSS 7.5).
Is any Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin vulnerability listed in CISA KEV?
No. None of the known Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin vulnerabilities is currently listed in the CISA KEV catalog.