WordPress plugin
Ultimate Addons for Elementor security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 6 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High3
- Medium2
- Low0
All Ultimate Addons for Elementor vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Authenticated (Contributor+) Privilege Escalation ≤1.36.31Update to 1.36.32 | CVE-2024-37455 | |
| High8.8 | Authenticated (Contributor+) Privilege Escalation ≤1.36.20Update to 1.36.21 | CVE-2023-50890 | |
| High7.2 | Registration Bypass <1.24.2Update to 1.24.2 | CVE-2020-13125 | |
| Critical9.8 | Authentication Bypass <1.20.1Update to 1.20.1 | — |
- High8.8Authenticated (Contributor+) Privilege Escalation
≤1.36.31Update to 1.36.32
- High8.8Authenticated (Contributor+) Privilege Escalation
≤1.36.20Update to 1.36.21
- High7.2Registration Bypass
<1.24.2Update to 1.24.2
- Critical9.8Authentication Bypass
<1.20.1Update to 1.20.1
Ultimate Addons for Elementor: common questions
Does Ultimate Addons for Elementor have known vulnerabilities?
Yes. VulnCrest Radar lists 6 known vulnerabilities in Ultimate Addons for Elementor: 1 critical, 3 high, 2 medium. None are known to affect version null.
How do I check which version of Ultimate Addons for Elementor I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Ultimate Addons for Elementor vulnerability?
CVE-2026-66688, published Jul 29, 2026: Ultimate Addons for Elementor <= 1.45.2 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any Ultimate Addons for Elementor vulnerability listed in CISA KEV?
No. None of the known Ultimate Addons for Elementor vulnerabilities is currently listed in the CISA KEV catalog.