WordPress plugin

Magical Addons For Elementor ( Theme Builder, Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) security & vulnerabilities

Q: Is any Magical Addons For Elementor ( Theme Builder, Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) vulnerability listed in CISA KEV?

No. None of the known Magical Addons For Elementor ( Theme Builder, Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) vulnerabilities is currently listed in the CISA KEV catalog.

magical-addons-for-elementor— active installsLast vulnerability Mar 1, 2026

No known unpatched vulnerabilities in the latest version

All 10 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

10Known vulnerabilities

Critical0
High0
Medium10
Low0

Vulnerabilities per year

All Magical Addons For Elementor ( Theme Builder, Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) vulnerabilities

Magical Addons For Elementor ( Theme Builder, Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) vulnerabilities
Severity	Vulnerability	CVE	Published
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.4.1Update to 1.4.2	CVE-2026-32429	Mar 01
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes ≤1.3.8Update to 1.3.9	CVE-2025-8196	Jul 28, 2025
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.3.6Update to 1.3.7	CVE-2024-54212	Dec 2, 2024
Medium4.3	Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template ≤1.2.4Update to 1.2.5	CVE-2024-10352	Nov 8, 2024
Medium6.4	Authenticated (Subscriber+) Server-Side Request Forgery ≤1.2.1Update to 1.2.3	CVE-2024-51665	Nov 1, 2024
Medium6.4	Authenticated (Subscriber+) Server-Side Request Forgery ≤1.1.41Update to 1.1.42	CVE-2024-38730	Jul 11, 2024
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.1.41Update to 1.1.42	CVE-2024-38681	Jul 10, 2024
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.1.39Update to 1.1.40	CVE-2024-5161	Jun 5, 2024
Medium4.3	Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.1.34Update to 1.1.35	CVE-2024-34547	May 7, 2024
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting via Text Effect Widget ≤1.1.37Update to 1.1.38	CVE-2024-2923	May 6, 2024

Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.4.1Update to 1.4.2
CVE-2026-32429Mar 01
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes
≤1.3.8Update to 1.3.9
CVE-2025-8196Jul 28, 2025
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.3.6Update to 1.3.7
CVE-2024-54212Dec 2, 2024
Medium4.3
Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template
≤1.2.4Update to 1.2.5
CVE-2024-10352Nov 8, 2024
Medium6.4
Authenticated (Subscriber+) Server-Side Request Forgery
≤1.2.1Update to 1.2.3
CVE-2024-51665Nov 1, 2024
Medium6.4
Authenticated (Subscriber+) Server-Side Request Forgery
≤1.1.41Update to 1.1.42
CVE-2024-38730Jul 11, 2024
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.1.41Update to 1.1.42
CVE-2024-38681Jul 10, 2024
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.1.39Update to 1.1.40
CVE-2024-5161Jun 5, 2024
Medium4.3
Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.1.34Update to 1.1.35
CVE-2024-34547May 7, 2024
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting via Text Effect Widget
≤1.1.37Update to 1.1.38
CVE-2024-2923May 6, 2024

Magical Addons For Elementor ( Theme Builder, Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ): common questions

Does Magical Addons For Elementor ( Theme Builder, Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) have known vulnerabilities?

Yes. VulnCrest Radar lists 10 known vulnerabilities in Magical Addons For Elementor ( Theme Builder, Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ): 10 medium. None are known to affect version null.

How do I check which version of Magical Addons For Elementor ( Theme Builder, Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Magical Addons For Elementor ( Theme Builder, Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) vulnerability?

CVE-2026-32429, published Mar 1, 2026: Magical Addons For Elementor <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).

Is any Magical Addons For Elementor ( Theme Builder, Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) vulnerability listed in CISA KEV?

No. None of the known Magical Addons For Elementor ( Theme Builder, Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) vulnerabilities is currently listed in the CISA KEV catalog.