WordPress plugin
WPZOOM Addons for Elementor – Starter Templates & Widgets security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 9 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High0
- Medium8
- Low0
All WPZOOM Addons for Elementor – Starter Templates & Widgets vulnerabilities
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'regions[i][link][url]' and 'pins[i][link][url]' Parameters
≤1.4.20Update to 1.4.21
- Medium6.1Reflected Cross-Site Scripting
≤1.3.4Update to 1.3.5
- Medium6.1Unauthenticated Reflected Cross-Site Scripting via 'title_tag' Parameter
≤1.3.4Update to 1.3.5
- Medium5.3Unauthenticated Protected Post Exposure via ajax_post_grid_load_more
≤1.3.2Update to 1.3.3
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.2.10Update to 1.2.11
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget
≤1.1.38Update to 1.1.39
- Critical9.8Unauthenticated Local File Inclusion
≤1.1.37Update to 1.1.38
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box Widget
≤1.1.36Update to 1.1.37
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.1.35Update to 1.1.36
WPZOOM Addons for Elementor – Starter Templates & Widgets: common questions
Does WPZOOM Addons for Elementor – Starter Templates & Widgets have known vulnerabilities?
Yes. VulnCrest Radar lists 9 known vulnerabilities in WPZOOM Addons for Elementor – Starter Templates & Widgets: 1 critical, 8 medium. None are known to affect version null.
How do I check which version of WPZOOM Addons for Elementor – Starter Templates & Widgets I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WPZOOM Addons for Elementor – Starter Templates & Widgets vulnerability?
CVE-2026-126029, published Nov 12, 2026: WPZOOM Addons for Elementor <= 1.4.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'regions[i][link][url]' and 'pins[i][link][url]' Parameters. Severity: Medium (CVSS 6.4).
Is any WPZOOM Addons for Elementor – Starter Templates & Widgets vulnerability listed in CISA KEV?
No. None of the known WPZOOM Addons for Elementor – Starter Templates & Widgets vulnerabilities is currently listed in the CISA KEV catalog.