WordPress plugin
Xpro Addons — 150+ Widgets for Elementor security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 26 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium24
- Low0
All Xpro Addons — 150+ Widgets for Elementor vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Authenticated (Author+) Arbitrary File Upload ≤1.4.19.1Update to 1.4.20 | CVE-2025-69312 | |
| High8.0 | Authenticated (Contributor+) PHP Object Injection ≤1.4.3.1Update to 1.4.3.2 | CVE-2024-4471 |
- High8.8Authenticated (Author+) Arbitrary File Upload
≤1.4.19.1Update to 1.4.20
- High8.0Authenticated (Contributor+) PHP Object Injection
≤1.4.3.1Update to 1.4.3.2
Xpro Addons — 150+ Widgets for Elementor: common questions
Does Xpro Addons — 150+ Widgets for Elementor have known vulnerabilities?
Yes. VulnCrest Radar lists 26 known vulnerabilities in Xpro Addons — 150+ Widgets for Elementor: 2 high, 24 medium. None are known to affect version null.
How do I check which version of Xpro Addons — 150+ Widgets for Elementor I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Xpro Addons — 150+ Widgets for Elementor vulnerability?
CVE-2026-114177, published Oct 22, 2026: Xpro Addons — 150+ Widgets for Elementor <= 1.7.10 - Cross-Site Request Forgery. Severity: Medium (CVSS 4.3).
Is any Xpro Addons — 150+ Widgets for Elementor vulnerability listed in CISA KEV?
No. None of the known Xpro Addons — 150+ Widgets for Elementor vulnerabilities is currently listed in the CISA KEV catalog.