Essential Addons for Elementor
WPDeveloper
Developer
6.5.12
Latest version
2,000,000
Installations
No date
Last updated
Vulnerability history
0 present
52 patched
7 Mitigation rules
- Authenticated (Contributor+) Stored Cross-Site Scripting via Info Box Widget vulnerability<= 6.5.9Feb 13, 2026
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 5.9.11Feb 2, 2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery & Interactive Circle vulnerability<= 5.9.15Feb 2, 2026
- Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Several Widgets vulnerability<= 5.9.19Feb 2, 2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via 'Dual Color Header', 'Event Calendar', & 'Advanced Data Table' vulnerability<= 5.9.19Feb 2, 2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery Widget vulnerability<= 6.0.3Feb 2, 2026
- Cross Site Scripting (XSS) vulnerability<= 6.5.3Jan 6, 2026
- Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library vulnerability<= 6.0.4Dec 31, 2025
- Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widget vulnerability<= 6.1.12Dec 31, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 6.5.3Dec 16, 2025
- Broken Access Control vulnerability<= 6.5.5Nov 18, 2025
- Broken Access Control vulnerability<= 6.2.4Sep 17, 2025
- Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items' vulnerability<= 6.2.2Aug 14, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via `Calendar` And `Business Reviews` Widgets vulnerability<= 6.1.19Jul 7, 2025
- Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widget vulnerability<= 6.1.12Jun 9, 2025
- Sensitive Data Exposure Vulnerability<= 6.1.9Apr 16, 2025
- Cross Site Scripting (XSS) Vulnerability<= 6.1.9Apr 16, 2025
- Reflected Cross Site Scripting (XSS) vulnerability<= 6.0.14Feb 4, 2025
- Cross Site Scripting (XSS) vulnerability<= 6.0.7Dec 18, 2024
- Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation vulnerability<= 6.0.9Nov 14, 2024
- Authenticated (Contributor+) Sensitive Information Exposure vulnerability<= 6.0.9Nov 14, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 6.0.7Nov 14, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget vulnerability<= 6.0.3Sep 11, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via no_more_items_text Parameter vulnerability<= 5.9.27Aug 13, 2024
- Cross Site Scripting (XSS) vulnerability<= 5.9.26Aug 1, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 5.9.23Jun 11, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 5.9.22Jun 6, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Feed vulnerability<= 5.9.21May 29, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 5.9.20May 14, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via 'Interactive Circles' vulnerability<= 5.9.19May 10, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 5.9.17May 1, 2024
- Information Exposure vulnerability<= 5.9.15Apr 25, 2024
- Authenticated (Contributor+) Store Cross-Site Scripting via Widget URL Attribute vulnerability<= 5.9.14Apr 17, 2024
- Authenticated (Author+) PHP Object Injection via error_resetpassword vulnerability<= 5.9.13Apr 1, 2024
- Unauthenticated Sensitive Information Exposure vulnerability<= 5.9.13Apr 1, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 5.9.11Mar 26, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar vulnerability<= 5.9.9Mar 12, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table vulnerability<= 5.9.9Mar 12, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery vulnerability<= 5.9.8Feb 13, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion vulnerability<= 5.9.8Feb 13, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 5.9.8Feb 13, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 5.9.8Feb 13, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 5.9.7Feb 2, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Image URl vulnerability<= 5.9.4Jan 18, 2024
- Authenticated (Contributor+) Stored Cross-Site Scritping vulnerability<= 5.9.4Jan 18, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 5.9.2Jan 4, 2024
- Contributor+ Privilege Escalation vulnerability<= 5.8.8Sep 15, 2023
- Unauthenticated MailChimp API Key Disclosure vulnerability<= 5.8.1Jul 20, 2023
- Unauthenticated Privilege Escalation vulnerability5.4.0-5.7.1May 11, 2023
- Reflected Cross-Site Scripting (XSS) vulnerability<= 5.0.8Feb 18, 2022
- Unauthenticated Local File Inclusion (LFI) vulnerability<= 5.0.4Jan 31, 2022
- Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities<= 4.5.3Apr 13, 2021