← WordPress Vulnerabilities
WordPress security by component

Elementor AI Addons

Elementor AI Addons is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jan 15, 2025; the highest CVE/CNA score is 6.5.

Plugin slug: ai-addons-for-elementor

CVE-2025-22758: Elementor AI Addons: Cross-site scripting

Elementor AI Addons is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedJan 15, 2025
Safe version guidanceSee mitigation notes
Safe version
Jan 15, 2025 CVE-2025-22758
Elementor AI Addons: Cross-site scripting
Elementor AI Addons is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.5
NVDPending
Jan 07, 2025 CVE-2024-12140
Elementor Addons AI Addons – 70 Widgets, Premium Templates, Ultimate Elements: A security weakness
Elementor Addons AI Addons – 70 Widgets, Premium Templates, Ultimate Elements is affected by a security weakness. Exploitation requires at least contributor-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVDPending