WordPress plugin
Essential Addons for Elementor – Popular Elementor Templates & Widgets security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical2
- High9
- Medium64
- Low1
All Essential Addons for Elementor – Popular Elementor Templates & Widgets vulnerabilities
- High7.4Unauthenticated Privilege Escalation to 'page_id' Parameter via Elementor Revision
≤6.8.7Update to 6.8.8
- High7.36.8.6 - Unauthenticated Registration Approval Bypass
6.7.3 – 6.8.6Update to 6.8.7
- High7.3Unauthenticated Privilege Escalation
≤6.7.1Update to 6.7.2
- High8.8Authenticated (Contributor+) Account Takeover via Email Header Injection
≤6.6.10Update to 6.6.11
- High8.0Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation
≤6.0.9Update to 6.0.10
- High8.8Authenticated (Author+) PHP Object Injection via error_resetpassword
≤5.9.13Update to 5.9.14
- High7.4Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar
≤5.9.9Update to 5.9.10
- High8.8Authenticated (Contributor+) Privilege Escalation
≤5.8.8Update to 5.8.9
- Critical9.8Unauthenticated Arbitrary Password Reset to Privilege Escalation
≤5.7.1Update to 5.7.2
- Critical9.8Local File Inclusion
1.0.0 – 5.0.4Update to 5.0.5
- High8.8Authenticated (Contributor+) Privilege Escalation
≤4.6.4Update to 4.6.5
Essential Addons for Elementor – Popular Elementor Templates & Widgets: common questions
Does Essential Addons for Elementor – Popular Elementor Templates & Widgets have known vulnerabilities?
Yes. VulnCrest Radar lists 76 known vulnerabilities in Essential Addons for Elementor – Popular Elementor Templates & Widgets: 2 critical, 9 high, 64 medium, 1 low. At least one is not fixed in the latest version.
How do I check which version of Essential Addons for Elementor – Popular Elementor Templates & Widgets I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Essential Addons for Elementor – Popular Elementor Templates & Widgets vulnerability?
CVE-2026-118205, published Oct 30, 2026: Essential Addons for Elementor <= 6.8.7 - Unauthenticated Privilege Escalation to 'page_id' Parameter via Elementor Revision. Severity: High (CVSS 7.4).
Is any Essential Addons for Elementor – Popular Elementor Templates & Widgets vulnerability listed in CISA KEV?
No. None of the known Essential Addons for Elementor – Popular Elementor Templates & Widgets vulnerabilities is currently listed in the CISA KEV catalog.