WordPress security by component
Animation Addons for Elementor – GSAP Motion Elementor Addons & Website Templates
Plugin description
Animation Addons for Elementor – GSAP Motion Elementor Addons & Website Templates is a WordPress component with 5 published CVE records in this archive. The latest tracked vulnerability was published Jul 10, 2026; the highest CVE/CNA score is 6.5.
Plugin slug:
animation-addons-for-elementorLatest vulnerability
CVE-2026-15299: Animation Addons for Elementor – GSAP Motion Elementor Addons & Website Templates: Cross-site scripting
Animation Addons for Elementor – GSAP Motion Elementor Addons & Website Templates is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 2.6.3.
| Safe version |
|
||
|---|---|---|---|
| Jul 10, 2026 |
CVE-2026-15299
Animation Addons for Elementor – GSAP Motion Elementor Addons & Website Templates: Cross-site scripting
Animation Addons for Elementor – GSAP Motion Elementor Addons & Website Templates is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 2.6.3.
|
> 2.6.3 |
CVE6.4
NVDPending
|
| Jun 10, 2026 |
CVE-2025-8444
Animation Addons for Elementor – GSAP Motion Elementor Addons & Website Templates: Cross-site scripting
Animation Addons for Elementor – GSAP Motion Elementor Addons & Website Templates is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 2.6.7.
|
> 2.6.7 |
CVE6.4
NVDPending
|
| Apr 08, 2026 |
CVE-2026-39702
Animation Addons for Elementor: Cross-site scripting
Animation Addons for Elementor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 2.6.1.
|
> 2.6.1 |
CVE6.5
NVDPending
|
| Dec 09, 2025 |
CVE-2025-67540
Animation Addons for Elementor: A security weakness
Animation Addons for Elementor is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Dec 18, 2024 |
CVE-2024-12340
Animation Addons for Elementor: Sensitive information exposure
Animation Addons for Elementor is affected by sensitive information exposure. Exploitation requires at least contributor-level access. Successful exploitation can disclose data that should not be available to the caller.
|
See mitigation notes |
CVE4.3
NVDPending
|