WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce

Best Addons for Elementor with 120+ Elementor FREE & Pro Widgets & 1000+ Elementor Templates with Mega Menu, Post Grid, Header Footer, WooCommerce

39Reported vulnerabilities
8.8Highest CVSS score
6.4.18Latest version
100,000+Active installs

What to do now

Update The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce to 6.4.12 or later. 39 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 14, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2024-2203 High 8.8 0.6% 0 to 5.4.1 (inclusive) 5.4.2 March 27, 2024
CVE-2021-4332 Medium 6.5 0.8% 2.0.6 and earlier
4.0 to 4.1.9 (inclusive)		 2.0.7 April 14, 2021
CVE-2026-15285 Medium 6.4 0.4% 0 to 6.4.11 (inclusive) 6.4.12 July 10, 2026
CVE-2026-9243 Medium 6.4 0.3% 0 to 6.4.15 (inclusive) 6.4.16 May 29, 2026
CVE-2025-9698 Medium 6.4 0.3% 6.3.15 and earlier 6.3.16 September 22, 2025
CVE-2024-53823 Medium 6.4 0.3% 5.6.14 and earlier 6.0.1 December 2, 2024
CVE-2024-43977 Medium 6.4 0.3% 5.6.2 and earlier 5.6.3 August 28, 2024
CVE-2024-35709 Medium 6.4 0.3% 5.5.4 and earlier 5.5.5 June 6, 2024
CVE-2024-2784 Medium 6.4 0.3% 5.5.4 and earlier 5.5.5 May 23, 2024
CVE-2024-34373 Medium 6.4 0.3% 5.4.2 and earlier 5.5.0 May 3, 2024
CVE-2024-3197 Medium 6.4 0.4% 5.4.2 and earlier 5.5.0 April 25, 2024
CVE-2024-2210 Medium 6.4 0.5% 0 to 5.4.1 (inclusive) 5.4.2 March 27, 2024
WF-0114a028-42ef-4668-815f-d62494565116 Medium 6.4 — 6.4.11 and earlier 6.4.12 May 21, 2026
WF-347feeaa-2d5c-4818-ab9e-2125a00b8ae8 Medium 6.4 — 6.4.11 and earlier 6.4.12 May 21, 2026
CVE-2026-5243 Medium 6.4 0.2% 6.4.11 and earlier 6.4.12 May 13, 2026
CVE-2026-3311 Medium 6.4 0.2% 0 to 6.4.9 (inclusive) 6.4.10 April 8, 2026
CVE-2025-7646 Medium 6.4 0.2% 0 to 6.3.10 (inclusive) 6.3.11 August 1, 2025
CVE-2025-49076 Medium 6.4 0.2% 6.2.7 and earlier 6.2.8 May 30, 2025
CVE-2024-23511 Medium 6.4 0.1% 5.3.3 and earlier 5.3.4 January 30, 2024
CVE-2025-1287 Medium 5.4 0.3% 0 to 6.2.2 (inclusive) 6.2.3 March 8, 2025
CVE-2024-11829 Medium 5.4 0.4% 0 to 6.1.8 (inclusive) 6.2.0 February 1, 2025
CVE-2024-5583 Medium 5.4 0.3% Before 5.6.3 5.6.3 August 22, 2024
CVE-2024-6575 Medium 5.4 0.3% 0 to 5.6.2 (inclusive) 5.6.3 August 20, 2024
CVE-2024-5763 Medium 5.4 0.4% 0 to 5.6.2 (inclusive) 5.6.3 August 20, 2024
CVE-2024-4482 Medium 5.4 0.4% 0 to 5.6.1 (inclusive) 5.6.2 July 3, 2024
CVE-2024-4983 Medium 5.4 0.4% 0 to 5.6.0 (inclusive) 5.6.1 June 27, 2024
CVE-2024-4485 Medium 5.4 0.3% 0 to 5.5.2 (inclusive) 5.5.3 May 24, 2024
CVE-2024-4484 Medium 5.4 0.7% 0 to 5.5.1 (inclusive) 5.5.3 May 24, 2024
CVE-2024-3718 Medium 5.4 0.4% 0 to 5.5.4 (inclusive) 5.5.5 May 24, 2024
CVE-2024-2785 Medium 5.4 0.3% 0 to 5.4.2 (inclusive) 5.5.0 May 14, 2024
CVE-2024-0445 Medium 5.4 0.5% 0 to 5.4.2 (inclusive)
- to 5.4.2 (inclusive)		 5.5.0 May 14, 2024
CVE-2024-3199 Medium 5.4 0.5% 0 to 5.4.2 (inclusive) 5.5.0 May 2, 2024
CVE-2024-1419 Medium 5.4 0.3% 0 to 5.4.0 (inclusive) 5.4.1 March 7, 2024
CVE-2026-2385 Medium 5.3 0.1% 0 to 6.4.7 (inclusive) 6.4.8 February 22, 2026
CVE-2024-43932 Medium 4.3 0.6% 5.6.2 and earlier 5.6.3 August 26, 2024
CVE-2026-2386 Medium 4.3 0.2% 0 to 6.4.7 (inclusive) 6.4.8 February 18, 2026
CVE-2025-55712 Medium 4.3 0.2% 6.3.13 and earlier 6.3.14 August 14, 2025
CVE-2024-10365 Medium 4.3 0.3% Before 6.0.4 6.0.4 November 20, 2024
CVE-2024-8913 Medium 4.3 0.4% Before 5.6.12 5.6.12 October 11, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.