WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Essential Addons for Elementor – Popular Elementor Templates & Widgets

Elementor addon offering 120+ widgets and templates — Elementor Gallery, Slider, Form, Post Grid, Menu, Accordion, WooCommerce & more.

63Reported vulnerabilities
9.8Highest CVSS score
6.7.3Latest version
2,000,000+Active installs

What to do now

Update Essential Addons for Elementor – Popular Elementor Templates & Widgets to 6.8.1 or later. 63 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 17, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2023-32243 Critical 9.8 75.5% 5.7.1 and earlier 5.7.2 May 11, 2023
CVE-2024-3018 High 8.8 0.8% 0 to 5.9.13 (inclusive)
0 to 5.9.13 (inclusive)		 5.9.14 March 30, 2024
CVE-2026-15155 High 8.8 0.7% 0 to 6.6.10 (inclusive) 6.6.11 July 11, 2026
CVE-2023-41955 High 8.8 0.6% 5.8.8 and earlier 5.8.9 September 14, 2023
CVE-2021-4447 High 8.8 0.5% 4.6.4 and earlier 4.6.5 May 5, 2021
CVE-2026-7665 Medium 5.3 7.2% 0 to 6.6.4 (inclusive) 6.6.5 June 6, 2026
CVE-2024-1536 High 7.4 0.5% 0 to 5.9.9 (inclusive) 5.9.10 March 13, 2024
CVE-2026-18039 High 7.3 0.3% 6.7.1 and earlier 6.7.2 August 12, 2026
CVE-2026-15145 Medium 6.4 0.4% 0 to 6.6.11 (inclusive) 6.7.0 July 21, 2026
CVE-2026-15156 Medium 6.4 0.3% 0 to 6.6.11 (inclusive) 6.7.0 July 21, 2026
CVE-2026-6459 Medium 6.4 0.3% 0 to 6.6.2 (inclusive) 6.6.3 July 8, 2026
CVE-2026-5193 Medium 6.5 0.2% 0 to 6.5.13 (inclusive) 6.6.0 May 14, 2026
CVE-2025-13977 Medium 6.4 0.3% 0 to 6.5.3 (inclusive) 6.5.4 December 17, 2025
CVE-2025-39590 Medium 6.4 0.3% 6.1.9 and earlier 6.1.10 April 16, 2025
CVE-2025-24752 Medium 6.1 1.2% 6.0.14 and earlier 6.0.15 February 4, 2025
CVE-2024-39649 Medium 6.4 0.3% 5.9.26 and earlier 5.9.27 August 1, 2024
CVE-2024-4448 Medium 6.4 0.5% 0 to 5.9.19 (inclusive) 5.9.20 May 14, 2024
CVE-2024-4449 Medium 6.4 0.3% 5.9.19 and earlier 5.9.20 May 9, 2024
CVE-2024-3728 Medium 6.4 0.6% 0 to 5.9.15 (inclusive) 5.9.16 May 2, 2024
CVE-2024-4003 Medium 6.4 0.5% 5.9.15 and earlier 5.9.16 April 24, 2024
CVE-2024-3333 Medium 6.4 0.4% 0 to 5.9.14 (inclusive) 5.9.15 April 17, 2024
CVE-2024-2623 Medium 6.4 0.4% 0 to 5.9.11 (inclusive) 5.9.12 April 9, 2024
CVE-2024-2650 Medium 6.4 0.4% 5.9.11 and earlier 5.9.12 March 25, 2024
CVE-2024-1537 Medium 6.4 0.4% 0 to 5.9.9 (inclusive) 5.9.10 March 13, 2024
CVE-2024-1276 Medium 6.4 0.4% 0 to 5.9.8 (inclusive) 5.9.9 February 29, 2024
CVE-2024-1236 Medium 6.4 0.5% 0 to 5.9.8 (inclusive) 5.9.9 February 29, 2024
CVE-2024-0586 Medium 6.4 0.4% 5.9.4 and earlier 5.9.5 February 5, 2024
CVE-2026-13344 Medium 6.4 0.2% Before 6.6.10 6.6.10 July 30, 2026
CVE-2026-1512 Medium 6.4 0.2% 0 to 6.5.9 (inclusive) 6.5.10 February 14, 2026
CVE-2025-69092 Medium 6.4 0.2% 6.5.3 and earlier 6.5.4 January 6, 2026
CVE-2025-8451 Medium 6.4 0.2% 0 to 6.2.2 (inclusive) 6.2.3 August 15, 2025
CVE-2025-6244 Medium 6.4 0.2% 6.1.19 and earlier 6.1.20 July 7, 2025
CVE-2024-56063 Medium 6.4 0.2% 6.0.7 and earlier 6.0.8 December 18, 2024
CVE-2024-34764 Medium 6.4 — 5.9.15 and earlier 5.9.16 May 17, 2024
CVE-2021-4446 Medium 6.3 0.3% 4.6.4 and earlier 4.6.5 May 5, 2021
CVE-2024-8979 Medium 5.7 0.5% 0 to 6.0.9 (inclusive)
0 to 6.0.9 (inclusive)		 6.0.10 November 15, 2024
CVE-2024-8978 Medium 5.7 0.5% 0 to 6.0.9 (inclusive) 6.0.10 November 15, 2024
CVE-2024-8961 Medium 5.4 0.3% 0 to 6.0.7 (inclusive) 6.0.8 November 15, 2024
CVE-2024-8742 Medium 5.4 0.4% Before 6.0.4 6.0.4 September 13, 2024
CVE-2024-8440 Medium 5.4 0.4% Before 6.0.4 6.0.4 September 11, 2024
CVE-2024-7092 Medium 5.4 0.4% 5.9.27 and earlier 6.0.0 August 13, 2024
CVE-2024-5189 Medium 5.4 0.4% 0 to 5.9.23 (inclusive) 5.9.24 June 11, 2024
CVE-2024-5188 Medium 5.4 0.3% Before 5.9.23 5.9.23 June 6, 2024
CVE-2024-5073 Medium 5.4 0.3% 0 to 5.9.21 (inclusive) 5.9.22 May 30, 2024
CVE-2024-4624 Medium 5.4 0.4% 0 to 5.9.20 (inclusive) 5.9.21 May 14, 2024
CVE-2024-4275 Medium 5.4 0.3% 0 to 5.9.19 (inclusive) 5.9.20 May 14, 2024
CVE-2024-4156 Medium 5.4 0.6% 0 to 5.9.17 (inclusive) 5.9.18 May 2, 2024
CVE-2024-1172 Medium 5.4 0.5% 0 to 5.9.8 (inclusive) 5.9.9 February 29, 2024
CVE-2024-1171 Medium 5.4 0.4% 0 to 5.9.8 (inclusive) 5.9.9 February 29, 2024
CVE-2024-0954 Medium 5.4 0.4% 5.9.7 and earlier 5.9.8 February 5, 2024
CVE-2024-0585 Medium 5.4 0.4% 5.9.4 and earlier 5.9.5 February 5, 2024
CVE-2023-7044 Medium 5.4 0.4% 5.9.2 and earlier 5.9.3 January 4, 2024
CVE-2026-81777 Medium 5.3 0.3% 6.8.0 and earlier 6.8.1 August 27, 2026
CVE-2026-13345 Medium 5.3 0.2% Before 6.6.10 6.6.10 July 30, 2026
CVE-2026-25440 Medium 5.3 0.2% Before 6.6.0 6.6.0 April 22, 2026
CVE-2026-1004 Medium 5.3 0.4% 0 to 6.5.5 (inclusive) 6.5.6 January 16, 2026
CVE-2026-23543 Medium 5.3 0.2% 6.5.5 and earlier 6.5.6 November 18, 2025
CVE-2024-9994 Medium 5.4 0.2% 0 to 6.1.12 (inclusive) 6.1.13 June 7, 2025
CVE-2024-9993 Medium 5.4 0.2% 0 to 6.1.12 (inclusive) 6.1.13 June 7, 2025
CVE-2024-3733 Medium 5.3 0.5% 0 to 5.9.15 (inclusive)
0 to 5.9.15 (inclusive)		 5.9.16 April 25, 2024
CVE-2024-2974 Medium 5.3 0.5% 0 to 5.9.13 (inclusive) 5.9.14 April 9, 2024
CVE-2025-64352 Medium 4.3 0.2% 6.2.4 and earlier 6.3.0 September 17, 2025
CVE-2025-39589 Medium 4.3 0.4% 6.1.9 and earlier 6.1.10 April 16, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.