WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in ElementInvader Addons for Elementor

Ready to use Elementor Addon Elements like Menu, Forms, Maps, Newsletter with many styling options

16Reported vulnerabilities
8.8Highest CVSS score
1.4.5Latest version
3,000+Active installs

What to do now

Update ElementInvader Addons for Elementor to 1.4.4 or later. 16 of these have a fixed version available. Updating resolves them.

Plugin last updated: June 4, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days
Affected versionsFixed inPublished
CVE-2025-22786 High 8.8 0.7% 1.2.6 and earlier 1.2.7 January 13, 2025
CVE-2026-57376 High 7.2 0.3% 1.4.3 and earlier 1.4.4 July 7, 2026
CVE-2026-25007 Medium 6.5 0.3% 1.4.2 and earlier 1.4.3 March 23, 2026
CVE-2025-24729 Medium 6.4 0.3% 1.3.3 and earlier 1.3.4 January 24, 2025
CVE-2025-24578 Medium 6.4 0.4% 1.3.0 and earlier 1.3.1 January 24, 2025
CVE-2024-38705 Medium 6.4 0.3% 1.2.4 and earlier 1.2.5 July 11, 2024
CVE-2025-58205 Medium 6.4 0.2% 1.3.6 and earlier 1.3.7 August 27, 2025
CVE-2025-48288 Medium 6.4 0.2% 1.3.5 and earlier 1.3.6 May 19, 2025
CVE-2024-47630 Medium 6.4 0.2% 1.2.7 and earlier 1.2.8 September 30, 2024
CVE-2025-10873 Medium 5.8 0.2% 1.4.0 and earlier 1.4.1 October 15, 2025
CVE-2024-9888 Medium 5.4 0.3% Before 1.2.9 1.2.9 October 16, 2024
CVE-2024-2308 Medium 5.4 0.3% Before 1.2.3 1.2.3 March 16, 2024
CVE-2026-25028 Medium 4.3 0.2% 1.4.1 and earlier 1.4.2 February 5, 2026
CVE-2025-24618 Medium 4.3 0.5% 1.3.1 and earlier 1.3.2 January 24, 2025
CVE-2024-12059 Medium 4.3 0.3% Before 1.3.2 1.3.2 December 12, 2024
CVE-2024-9889 Medium 4.3 0.3% Before 1.3.0 1.3.0 October 19, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.