Known vulnerabilities in WPBITS Addons For Elementor Page Builder

Addons for Elementor Page Builder.

9Reported vulnerabilities

6.4Highest CVSS score

1.8.1Latest version

2,000+Active installs

What to do now

Update WPBITS Addons For Elementor Page Builder to 1.8.1 or later. 8 of these have a fixed version available. Updating resolves them.

Plugin last updated: January 19, 2026 / Tested up to WordPress: 6.7.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2025-9082	Medium 6.4	0.3%	0 to 1.8 (inclusive)	`1.8.1`	January 28, 2026
CVE-2025-22316	Medium 6.4	0.3%	1.5.1 and earlier	`1.6`	January 6, 2025
CVE-2024-56285	Medium 6.4	0.3%	1.5.1 and earlier	`1.6`	January 3, 2025
CVE-2024-32593	Medium 6.4	0.3%	1.3.4.2 and earlier	`1.4`	April 16, 2024
CVE-2026-39703	Medium 6.4	0.1%	1.8.1 and earlier	—	March 1, 2026
CVE-2024-37945	Medium 6.4	0.2%	1.5 and earlier	`1.5.1`	July 10, 2024
CVE-2024-8962	Medium 5.4	0.3%	Before 1.6	`1.6`	December 4, 2024
CVE-2024-4862	Medium 5.4	0.5%	Before 1.5.1	`1.5.1`	July 9, 2024
CVE-2024-2129	Medium 5.4	0.5%	Before 1.4	`1.4`	March 20, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.