VulnCrest
Search
Create account
Report an incident
Radar sectionsPlugins & themes
Check my site

WordPress plugin

Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates security & vulnerabilities

premium-addons-for-elementor— active installsLast vulnerability Oct 13, 2026

No known unpatched vulnerabilities in the latest version

All 44 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin
44Known vulnerabilities
  • Critical0
  • High0
  • Medium43
  • Low1
Vulnerabilities per year
2021: 2 vulnerabilities2212024: 28 vulnerabilities28242025: 5 vulnerabilities5252026: 9 vulnerabilities926

All Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates vulnerabilities

Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates vulnerabilities
SeverityVulnerabilityCVEPublished
Medium5.3Missing Authorization
≤4.11.110Update to 4.11.111
CVE-2026-109890
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.11.110Update to 4.11.111
CVE-2026-108490
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.11.110Update to 4.11.111
CVE-2026-108482
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.11.109Update to 4.11.110
CVE-2026-103084
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.11.105Update to 4.11.106
CVE-2026-62078
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.11.105Update to 4.11.106
CVE-2026-94168
Medium4.9Authenticated (Contributor+) Stored Cross-Site Scripting via 'premium_tooltip_text' Parameter
≤4.11.84Update to 4.11.85
CVE-2026-12141
Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_svg' Parameter
≤4.11.70Update to 4.11.71
CVE-2026-4790
Medium4.3Missing Authorization to Authenticated (Subscriber+) Settings Update
≤4.11.63Update to 4.11.64
CVE-2025-69300
Medium5.3Missing Authorization to Unauthenticated Sensitive Information Exposure via 'get_template_content'
≤4.11.53Update to 4.11.54
CVE-2025-14155
Medium4.3Cross-Site Request Forgery via 'insert_inner_template'
≤4.11.53Update to 4.11.54
CVE-2025-14163
Medium5.3Unauthenticated Information Exposure
≤4.11.53Update to 4.11.54
CVE-2025-68494
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.10.69Update to 4.10.70
CVE-2024-11937
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
≤4.11.8Update to 4.11.9
CVE-2025-4774
Medium4.3Missing Authorization
≤4.10.56Update to 4.10.57
CVE-2024-56225
Medium6.4Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Box Widget
≤4.10.60Update to 4.10.61
CVE-2024-10266
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Media Grid Widget
≤4.10.52Update to 4.10.53
CVE-2024-8681
Medium4.3Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion and Arbitrary Title Update
≤4.10.38Update to 4.10.39
CVE-2024-6824
Medium6.4Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Animated Text Widget
≤4.10.36Update to 4.10.37
CVE-2024-6495
Medium6.5Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.10.34Update to 4.10.35
CVE-2024-37922
Low3.1Regular Expressions Denial of Service
≤4.10.35Update to 4.10.36
CVE-2024-6434
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
≤4.10.36Update to 4.10.37
CVE-2024-6340
Medium4.4Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
≤4.10.33Update to 4.10.34
CVE-2024-5553
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget
≤4.10.31Update to 4.10.32
CVE-2024-4376
Medium5.4Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Global Tooltip
≤4.10.31Update to 4.10.32
CVE-2024-4379
Medium4.3Missing Authorization to Information Disclosure
≤4.10.31Update to 4.10.32
CVE-2024-4205
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Menu and Shape Divider
≤4.10.31Update to 4.10.32
CVE-2024-4378
Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.10.30Update to 4.10.31
CVE-2024-4203
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'arrow_style'
≤4.10.28Update to 4.10.29
CVE-2024-3647
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.10.28Update to 4.10.29
CVE-2024-3885
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.10.25Update to 4.10.26
CVE-2024-32791
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Button
≤4.10.27Update to 4.10.28
CVE-2024-2665
Medium5.4Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
≤4.10.24Update to 4.10.25
CVE-2024-2666
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.10.24Update to 4.10.25
CVE-2024-2664
Medium6.4Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link Widget
≤4.10.16Update to 4.10.17
CVE-2024-0376
Medium4.3Authenticated (Contributor+) Sensitive Information Exposure
≤4.10.22Update to 4.10.23
CVE-2024-31278
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.10.23Update to 4.10.24
CVE-2024-2399
Medium6.4Authenticated(Contributor+) Stored Cross-Site Scripting via Link Wrapper
≤4.0.17Update to 4.0.18
—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Banner, Team Members, and Image Scroll Widgets
≤4.10.21Update to 4.10.22
CVE-2024-1680
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.10.18Update to 4.10.19
CVE-2024-1242
Medium4.9Authenticated (Contributor+) Stored Cross-Site Scripting via onClick Events
≤4.10.18Update to 4.10.19
CVE-2024-0326
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.10.16Update to 4.10.17
CVE-2024-24831
Medium6.5Authenticated (Subscriber+) Limited Arbitrary Option Update
≤4.5.1Update to 4.5.2
CVE-2021-4445
Medium5.4Premium Addons for Elementor <=4.2.7 Contributor+ Stored Cross-Site Scripting
<4.2.8Update to 4.2.8
CVE-2021-24257

Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates: common questions

Does Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates have known vulnerabilities?

Yes. VulnCrest Radar lists 44 known vulnerabilities in Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates: 43 medium, 1 low. None are known to affect version null.

How do I check which version of Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates vulnerability?

CVE-2026-109890, published Oct 13, 2026: Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates <= 4.11.110 - Missing Authorization. Severity: Medium (CVSS 5.3).

Is any Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates vulnerability listed in CISA KEV?

No. None of the known Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Jump to

Are you sure?