The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce

Vulnerabilities 37Slug the-plus-addons-for-elementor-page-builderLatest version 6.4.14WordPress.org →

Minimum safe version

6.4.10

Update to 6.4.10 or later to address 37 fixable vulnerabilities

Latest available6.4.14 ✓
N/A
2026-02-18< 6.4.8

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Incorrect Authorization to Authenticated (Author+) Arbitrary Draft Post Creation via 'post_type'

WordfenceCVE
N/A
2026-02-21< 6.4.8

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Unauthenticated Email Relay

WordfenceCVE
N/A
2026-04-07< 6.4.10

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar

WordfenceCVE
Medium 6.8
2025-10-13< 6.3.16

The Plus Addons for Elementor <= 6.3.15 - Authenticated (Author+) Stored Cross-Site Scripting via SVG

EUVDWordfenceCVE
Medium 6.4
2025-08-01< 6.3.11

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting

EUVDWordfenceCVE
Medium 6.4
2025-03-08< 6.2.3

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

EUVDWordfenceCVE
N/A
2021-04-13< 2.0.6

WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 2.0.5 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Patchstack