VYPR

Essential Addons For Elementor Lite

by WordPress

Source repositories

CVEs (23)

  • CVE-2021-24255MedMay 5, 2021
    risk 0.35cvss 5.4epss 0.01

    The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, both via a similar method.

  • CVE-2025-39589MedApr 16, 2025
    risk 0.28cvss 4.3epss 0.00

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Retrieve Embedded Sensitive Data.This issue affects Essential Addons for Elementor: from n/a through…

  • CVE-2026-1004MedJan 16, 2026
    risk 0.27cvss 5.3epss 0.00

    The Essential Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 6.5.5 via the 'eael_product_quickview_popup' function. This makes it possible for unauthenticated attackers to retrieve WooCommerce product…

Page 2 of 2