WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Xpro Addons — 140+ Widgets for Elementor

Get Premium level 50+ Free Elementor Widgets, 10+ Free Elementor Extensions, 500+ Free Themes & Templates for Elementor.

21Reported vulnerabilities
8.8Highest CVSS score
1.7.7Latest version
40,000+Active installs

What to do now

Update Xpro Addons — 140+ Widgets for Elementor to 1.5.2 or later. 21 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 11, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2025-69312 High 8.8 0.3% 1.4.19.1 and earlier 1.4.20 January 19, 2026
CVE-2024-4471 High 8 0.6% 0 to 1.4.3.1 (inclusive) 1.4.3.2 May 23, 2024
CVE-2026-11614 Medium 6.4 0.4% 0 to 1.7.2 (inclusive) 1.7.3 June 24, 2026
CVE-2026-45214 Medium 6.5 0.2% 1.5.1 and earlier 1.5.2 March 30, 2026
CVE-2025-63044 Medium 6.4 0.3% 1.4.19.1 and earlier 1.4.20 December 6, 2025
CVE-2025-32163 Medium 6.4 0.4% 1.4.10 and earlier 1.4.11 April 4, 2025
CVE-2025-2108 Medium 6.4 0.3% 0 to 1.4.7.1 (inclusive) 1.4.8 March 20, 2025
CVE-2024-12584 Medium 6.5 0.4% Before 1.4.6.3 1.4.6.3 January 8, 2025
CVE-2024-54253 Medium 6.4 0.3% 1.4.6.5 and earlier 1.4.6.6 December 5, 2024
CVE-2024-43150 Medium 6.4 0.3% 1.4.4.2 and earlier 1.4.4.3 August 7, 2024
CVE-2024-4440 Medium 6.4 0.4% 0 to 1.4.3 (inclusive) 1.4.3.1 May 14, 2024
CVE-2024-2250 Medium 6.4 0.3% 1.4.2 and earlier 1.4.3 March 28, 2024
CVE-2025-13368 Medium 6.4 0.2% 0 to 1.4.20 (inclusive) 1.4.21 April 4, 2026
CVE-2026-2949 Medium 6.4 0.2% 0 to 1.4.24 (inclusive) 1.4.25 April 4, 2026
CVE-2025-14149 Medium 6.4 0.2% 0 to 1.4.24 (inclusive) 1.4.25 February 27, 2026
CVE-2025-58195 Medium 6.4 0.2% 1.4.17 and earlier 1.4.18 August 27, 2025
CVE-2024-7791 Medium 5.4 0.3% Before 1.4.4.4 1.4.4.4 August 27, 2024
CVE-2025-15369 Medium 5.3 0.2% 0 to 1.5.0 (inclusive) 1.5.1 May 20, 2026
CVE-2024-34570 Medium 4.4 0.3% 1.4.3 and earlier 1.4.3.1 May 7, 2024
CVE-2026-7105 Medium 4.3 0.2% 0 to 1.5.1 (inclusive) 1.5.2 August 5, 2026
CVE-2024-10319 Medium 4.3 0.3% Before 1.4.6.1 1.4.6.1 November 5, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.