WordPress plugin
Enter Addons – Ultimate Template Builder for Elementor security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 10 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium10
- Low0
All Enter Addons – Ultimate Template Builder for Elementor vulnerabilities
- Medium4.3Cross-Site Request Forgery
≤2.3.2Update to 2.3.3
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown and Image Comparison Widgets
≤2.2.7Update to 2.2.8
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.1.9Update to 2.2.1
- Medium4.3Authenticated (Contributor+) Post Disclosure
≤2.1.9Update to 2.2.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.1.8Update to 2.1.9
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Events Card Widget
≤2.1.8Update to 2.1.9
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.1.9Update to 2.2.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.1.6Update to 2.1.7
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Heading widget
≤2.1.5Update to 2.1.6
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Animation Title widget img tag
≤2.1.5Update to 2.1.6
Enter Addons – Ultimate Template Builder for Elementor: common questions
Does Enter Addons – Ultimate Template Builder for Elementor have known vulnerabilities?
Yes. VulnCrest Radar lists 10 known vulnerabilities in Enter Addons – Ultimate Template Builder for Elementor: 10 medium. None are known to affect version null.
How do I check which version of Enter Addons – Ultimate Template Builder for Elementor I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Enter Addons – Ultimate Template Builder for Elementor vulnerability?
CVE-2026-25014, published Jan 28, 2026: Enter Addons <= 2.3.2 - Cross-Site Request Forgery. Severity: Medium (CVSS 4.3).
Is any Enter Addons – Ultimate Template Builder for Elementor vulnerability listed in CISA KEV?
No. None of the known Enter Addons – Ultimate Template Builder for Elementor vulnerabilities is currently listed in the CISA KEV catalog.