WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Premium Addons for Elementor – Elementor Templates, Widgets & MCP Tools

Elementor Carousel, Mega Menu, Posts List/Slider, WooCommerce Widgets, Display Conditions, AI Abilities, Premade Templates & more.

37Reported vulnerabilities
6.5Highest CVSS score
4.11.98Latest version
600,000+Active installs

What to do now

Update Premium Addons for Elementor – Elementor Templates, Widgets & MCP Tools to 4.11.85 or later. 37 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 13, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2021-4445 Medium 4.3 0.4% Before 4.5.2 4.5.2 October 16, 2024
CVE-2024-37922 Medium 6.5 0.3% 4.10.34 and earlier 4.10.35 July 9, 2024
CVE-2024-3647 Medium 6.4 0.4% Before 4.10.29 4.10.29 May 2, 2024
CVE-2024-32791 Medium 6.4 0.3% 4.10.25 and earlier 4.10.26 April 22, 2024
CVE-2024-2665 Medium 6.4 0.5% Before 4.10.28 4.10.28 April 10, 2024
CVE-2024-2664 Medium 6.4 0.5% Before 4.10.25 4.10.25 April 10, 2024
CVE-2024-0326 Medium 6.4 0.6% Before 4.10.18 4.10.18 March 13, 2024
CVE-2024-1242 Medium 6.4 0.4% Before 4.10.19 4.10.19 February 29, 2024
CVE-2024-24831 Medium 6.4 0.3% 4.10.16 and earlier 4.10.17 February 2, 2024
CVE-2025-14155 Medium 5.3 0.8% Before 4.11.54 4.11.54 December 23, 2025
CVE-2024-10266 Medium 5.4 0.3% Before 4.10.61 4.10.61 October 29, 2024
CVE-2024-8681 Medium 5.4 0.4% Before 4.10.53 4.10.53 September 27, 2024
CVE-2024-6495 Medium 5.4 0.3% Before 4.10.37 4.10.37 July 12, 2024
CVE-2024-6340 Medium 5.4 0.4% Before 4.10.36 4.10.36 July 3, 2024
CVE-2024-5553 Medium 5.4 0.4% Before 4.10.34 4.10.34 June 12, 2024
CVE-2024-4379 Medium 5.4 0.3% Before 4.10.32 4.10.32 May 31, 2024
CVE-2024-4376 Medium 5.4 0.3% Before 4.10.32 4.10.32 May 31, 2024
CVE-2024-4378 Medium 5.4 0.3% Before 4.10.32 4.10.32 May 23, 2024
CVE-2024-4203 Medium 5.4 0.5% Before 4.10.31 4.10.31 May 2, 2024
CVE-2024-3885 Medium 5.4 0.4% Before 4.10.29 4.10.29 May 2, 2024
CVE-2024-2666 Medium 5.4 0.4% Before 4.10.25 4.10.25 April 10, 2024
CVE-2024-0376 Medium 5.4 0.7% 4.10.16 and earlier 4.10.17 April 9, 2024
CVE-2024-2399 Medium 5.4 0.4% Before 4.10.24 4.10.24 March 15, 2024
CVE-2024-1680 Medium 5.4 0.4% Before 4.10.22 4.10.22 March 13, 2024
CVE-2021-24257 Medium 5.4 0.6% Before 4.2.8 4.2.8 May 5, 2021
CVE-2026-4790 Medium 5.4 0.2% 0 to 4.11.70 (inclusive) 4.11.71 May 2, 2026
CVE-2025-68494 Medium 5.3 0.3% 4.11.53 and earlier 4.11.54 December 4, 2025
CVE-2024-11937 Medium 5.4 0.2% Before 4.10.70 4.10.70 July 4, 2025
CVE-2025-4774 Medium 5.4 0.2% Before 4.11.9 4.11.9 June 10, 2025
CVE-2026-12141 Medium 4.9 0.3% 0 to 4.11.84 (inclusive) 4.11.85 July 11, 2026
CVE-2024-6434 Medium 4.3 0.6% Before 4.10.36 4.10.36 July 4, 2024
CVE-2025-69300 Medium 4.3 0.2% 4.11.63 and earlier 4.11.64 January 17, 2026
CVE-2025-14163 Medium 4.3 0.2% Before 4.11.54 4.11.54 December 23, 2025
CVE-2024-56225 Medium 4.3 0.3% 4.10.56 and earlier 4.10.57 December 19, 2024
CVE-2024-6824 Medium 4.3 0.4% Before 4.10.39 4.10.39 August 8, 2024
CVE-2024-4205 Medium 4.3 0.3% Before 4.10.32 4.10.32 May 31, 2024
CVE-2024-31278 Medium 4.3 0.5% 4.10.22 and earlier 4.10.23 April 5, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.