Xpro Addons — 140+ Widgets for Elementor

Vulnerabilities 18Slug xpro-elementor-addonsLatest version 1.5.3WordPress.org →

Minimum safe version

1.4.25

Update to 1.4.25 or later to address 18 fixable vulnerabilities

Latest available1.5.3 ✓
N/A
2026-04-03< 1.4.25

Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Box Widget

WordfenceCVE
Critical 9.1
2026-01-22< 1.4.20

CVE-2025-69312

CVEWordfence
Medium 6.4
2025-03-20< 1.4.8

140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Site Title' widget

EUVDWordfenceCVE
Medium 4.3
2025-01-08< 1.4.6.3

CVE-2024-12584

CVEWordfence
High 8.0
2024-05-24< 1.4.3.2

WordPress Xpro Elementor Addons Plugin <= 1.4.3.1 is vulnerable to PHP Object Injection

PatchstackCVEWordfence
Medium 6.4
2024-05-15< 1.4.3.1

WordPress Xpro Elementor Addons Plugin <= 1.4.3 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfence