WordPress plugin

Premium Addons Pro for Elementor security & vulnerabilities

Q: Is any Premium Addons Pro for Elementor vulnerability listed in CISA KEV?

No. None of the known Premium Addons Pro for Elementor vulnerabilities is currently listed in the CISA KEV catalog.

premium-addons-pro— active installsLast vulnerability Mar 7, 2024

No known unpatched vulnerabilities in the latest version

All 9 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

9Known vulnerabilities

Critical0
High0
Medium9
Low0

Vulnerabilities per year

All Premium Addons Pro for Elementor vulnerabilities

Premium Addons Pro for Elementor vulnerabilities
Severity	Vulnerability	CVE	Published
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting via Premium Magic Scroll Module ≤2.9.12Update to 2.9.13	CVE-2024-2239	Mar 7, 2024
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting via Global Badge Module ≤2.9.12Update to 2.9.13	CVE-2024-2237	Mar 7, 2024
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting via Messenger Chat Widget ≤2.9.12Update to 2.9.13	CVE-2024-1997	Mar 7, 2024
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Mouse Cursor Module ≤2.9.12Update to 2.9.13	CVE-2024-2238	Mar 7, 2024
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting via Multi Scroll Widget ≤2.9.12Update to 2.9.13	CVE-2024-2000	Mar 7, 2024
Medium6.4	Authenticated(Contributor+) Stored Cross-Site Scripting via widget link ≤2.9.12Update to 2.9.13	CVE-2024-1996	Mar 6, 2024
Medium5.4	Missing Authorization ≤2.9.0Update to 2.9.1	CVE-2023-37869	Jul 10, 2023
Medium5.3	Sensitive Information Exposure ≤2.9.0Update to 2.9.1	CVE-2023-37868	Jul 10, 2023
Medium6.1	Reflected Cross-Site Scripting ≤2.8.24Update to 2.8.25	CVE-2023-34012	Jun 2, 2023

Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting via Premium Magic Scroll Module
≤2.9.12Update to 2.9.13
CVE-2024-2239Mar 7, 2024
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting via Global Badge Module
≤2.9.12Update to 2.9.13
CVE-2024-2237Mar 7, 2024
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting via Messenger Chat Widget
≤2.9.12Update to 2.9.13
CVE-2024-1997Mar 7, 2024
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Mouse Cursor Module
≤2.9.12Update to 2.9.13
CVE-2024-2238Mar 7, 2024
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting via Multi Scroll Widget
≤2.9.12Update to 2.9.13
CVE-2024-2000Mar 7, 2024
Medium6.4
Authenticated(Contributor+) Stored Cross-Site Scripting via widget link
≤2.9.12Update to 2.9.13
CVE-2024-1996Mar 6, 2024
Medium5.4
Missing Authorization
≤2.9.0Update to 2.9.1
CVE-2023-37869Jul 10, 2023
Medium5.3
Sensitive Information Exposure
≤2.9.0Update to 2.9.1
CVE-2023-37868Jul 10, 2023
Medium6.1
Reflected Cross-Site Scripting
≤2.8.24Update to 2.8.25
CVE-2023-34012Jun 2, 2023

Premium Addons Pro for Elementor: common questions

Does Premium Addons Pro for Elementor have known vulnerabilities?

Yes. VulnCrest Radar lists 9 known vulnerabilities in Premium Addons Pro for Elementor: 9 medium. None are known to affect version null.

How do I check which version of Premium Addons Pro for Elementor I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Premium Addons Pro for Elementor vulnerability?

CVE-2024-2239, published Mar 7, 2024: Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Premium Magic Scroll Module. Severity: Medium (CVSS 6.4).

Is any Premium Addons Pro for Elementor vulnerability listed in CISA KEV?

No. None of the known Premium Addons Pro for Elementor vulnerabilities is currently listed in the CISA KEV catalog.