WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Addon Elements for Elementor (formerly Elementor Addon Elements)

Addon Elements for Elementor comes with 40+ widgets and extensions to extend the power of Elementor Page Builder.

28Reported vulnerabilities
6.5Highest CVSS score
1.14.5Latest version
80,000+Active installs

What to do now

Update Addon Elements for Elementor (formerly Elementor Addon Elements) to 1.14.4 or later. 28 of these have a fixed version available. Updating resolves them.

Plugin last updated: March 23, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2024-1358 Medium 6.5 1.2% Before 1.13 1.13 March 13, 2024
CVE-2024-2792 Medium 6.4 0.5% Before 1.13.3 1.13.3 April 9, 2024
CVE-2024-30422 Medium 6.4 0.3% 1.13.1 and earlier 1.13.2 March 28, 2024
CVE-2024-29107 Medium 6.4 0.3% 1.12.10 and earlier 1.12.11 March 15, 2024
WF-11e97adc-b402-4d82-ae39-4dccbd70bcf2 Medium 6.5 — 1.11.7 and earlier 1.11.8 July 20, 2021
CVE-2025-12537 Medium 6.4 0.2% 0 to 1.14.3 (inclusive) 1.14.4 December 14, 2025
CVE-2024-47366 Medium 6.4 0.2% 1.13.6 and earlier 1.13.7 September 30, 2024
WF-a0297cab-8b6f-4e09-b552-4772c6f72c04 Medium 6.1 — Before 1.6.4 1.6.4 September 8, 2020
CVE-2024-7122 Medium 5.4 0.4% Before 1.13.7 1.13.7 August 30, 2024
CVE-2024-4401 Medium 5.4 0.3% Before 1.13.6 1.13.6 August 30, 2024
CVE-2024-4570 Medium 5.4 0.3% Before 1.13.6 1.13.6 June 27, 2024
CVE-2024-4569 Medium 5.4 0.4% Before 1.13.6 1.13.6 June 27, 2024
CVE-2024-2092 Medium 5.4 0.3% Before 1.13.4 1.13.4 June 12, 2024
CVE-2024-3743 Medium 5.4 0.6% Before 1.13.4 1.13.4 May 2, 2024
CVE-2024-1422 Medium 5.4 0.5% Before 1.13 1.13 March 13, 2024
CVE-2024-1393 Medium 5.4 0.5% Before 1.13 1.13 March 13, 2024
CVE-2024-1392 Medium 5.4 0.5% Before 1.13 1.13 March 13, 2024
CVE-2024-1391 Medium 5.4 0.5% Before 1.13 1.13 March 13, 2024
CVE-2024-0834 Medium 5.4 0.5% 1.12.11 and earlier 1.12.12 February 5, 2024
CVE-2023-4723 Medium 5.3 0.9% 1.12.7 and earlier 1.12.8 November 15, 2023
CVE-2023-5381 Medium 4.8 0.5% 1.12.7 and earlier 1.12.8 November 15, 2023
CVE-2024-2091 Medium 4.6 0.5% Before 1.13.3 1.13.3 March 28, 2024
CVE-2024-13215 Medium 4.3 0.5% Before 1.14 1.14 January 15, 2025
CVE-2026-28131 Medium 4.3 0.2% 1.14.4 and earlier 1.14.5 August 28, 2025
CVE-2024-8902 Medium 4.3 0.4% Before 1.13.9 1.13.9 October 12, 2024
CVE-2024-47361 Medium 4.3 0.4% 1.13.6 and earlier 1.13.7 September 30, 2024
CVE-2023-4690 Medium 4.3 0.3% 1.12.7 and earlier 1.12.8 November 15, 2023
CVE-2023-4689 Medium 4.3 0.3% 1.12.7 and earlier 1.12.8 November 15, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.