Known vulnerabilities in ElementsReady Addons for Elementor

ElementsReady Addons for Elementor comes up with ultimate widgets like Post, Accordion, Portfolio, Testimonial, Nav menu, Carousel, Slider etc..

10Reported vulnerabilities

6.4Highest CVSS score

6.7.2Latest version

3,000+Active installs

What to do now

Update ElementsReady Addons for Elementor to 6.6.3 or later. 9 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 31, 2025 / Tested up to WordPress: 6.8.8 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2024-54224	Medium 6.4	0.3%	6.4.7 and earlier	`6.4.8`	December 5, 2024
CVE-2024-47329	Medium 6.4	0.3%	6.4.0 and earlier	`6.4.1`	September 25, 2024
CVE-2024-34374	Medium 6.4	0.3%	5.8.0 and earlier	`5.9.0`	May 3, 2024
CVE-2024-51787	Medium 6.4	0.2%	6.4.3 and earlier	`6.4.4`	November 4, 2024
CVE-2024-47353	Medium 6.1	0.2%	6.4.2 to 6.4.2 (inclusive)	`6.4.3`	September 30, 2024
CVE-2024-9442	Medium 5.4	0.4%	1.9.0 and earlier	—	November 21, 2024
CVE-2024-9444	Medium 5.4	0.3%	0 to 6.4.3 (inclusive)	`6.4.4`	October 16, 2024
CVE-2024-5152	Medium 5.4	0.3%	Before 6.2.0	`6.2.0`	June 6, 2024
CVE-2025-39546	Medium 4.3	0.2%	6.6.2 and earlier	`6.6.3`	April 16, 2025
CVE-2024-10356	Medium 4.3	0.4%	0 to 6.4.8 (inclusive)	`6.4.9`	December 17, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.