N/A
2025-10-02< 1.0.17
X Addons for Elementor <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Youtube Video ID Field
Minimum safe version
1.0.17
Update to 1.0.17 or later to address 2 fixable vulnerabilities
X Addons for Elementor <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Youtube Video ID Field
CVE-2026-24605
WordPress X Addons for Elementor plugin <= 1.0.23 - Cross Site Scripting (XSS) vulnerability
CVE-2025-48132