WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Gum Addon for Elementor

Offers inbuilt widgets for elementor that help to create design more attractive

6Reported vulnerabilities
6.4Highest CVSS score
1.3.17Latest version
50,000+Active installs

What to do now

Update Gum Addon for Elementor to 1.3.11 or later. 6 of these have a fixed version available. Updating resolves them.

Plugin last updated: June 16, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2025-30800 Medium 6.4 0.3% 1.3.10 and earlier 1.3.11 March 27, 2025
CVE-2024-44027 Medium 6.4 0.3% 1.3.6 and earlier 1.3.7 September 24, 2024
CVE-2024-44035 Medium 6.4 0.3% 1.3.7 and earlier 1.3.8 September 23, 2024
CVE-2024-4668 Medium 6.4 0.3% 0 to 1.3.4 (inclusive) 1.3.5 May 30, 2024
CVE-2024-2348 Medium 6.4 0.4% Before 1.3.3 1.3.3 April 9, 2024
CVE-2024-37565 Medium 4.4 0.3% 1.3.5 and earlier 1.3.6 July 9, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.