Medium 6.4
2025-09-30< 2.1.6
The Pack Elementor addon <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typing Letter Widget
Minimum safe version
2.1.6
Update to 2.1.6 or later to address 10 fixable vulnerabilities
The Pack Elementor addon <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typing Letter Widget
The Pack Elementor addon <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
WordPress The Pack Elementor addons plugin <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-30925
CVE-2025-30845
CVE-2024-52356
CVE-2024-50453
CVE-2024-47383
CVE-2024-38768
CVE-2024-32718
CVE-2024-32785