WordPress security by component
ElementInvader Addons for Elementor
Plugin description
ElementInvader Addons for Elementor is a WordPress component with 16 published CVE records in this archive. The latest tracked vulnerability was published Jul 13, 2026; the highest CVE/CNA score is 8.5.
Plugin slug:
elementinvader-addons-for-elementorLatest vulnerability
CVE-2026-57376: ElementInvader Addons for Elementor: Cross-site scripting
ElementInvader Addons for Elementor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 1.4.3.
| Safe version |
|
||
|---|---|---|---|
| Jul 13, 2026 |
CVE-2026-57376
ElementInvader Addons for Elementor: Cross-site scripting
ElementInvader Addons for Elementor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 1.4.3.
|
1.4.4 |
CVE7.1
NVDPending
|
| Mar 25, 2026 |
CVE-2026-25007
ElementInvader Addons for Elementor: SQL injection
ElementInvader Addons for Elementor is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 1.4.2.
|
1.4.3 |
CVE8.5
NVDPending
|
| Feb 03, 2026 |
CVE-2026-25028
ElementInvader Addons for Elementor: A security weakness
ElementInvader Addons for Elementor is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.4
NVDPending
|
| Nov 05, 2025 |
CVE-2025-10873
ElementInvader Addons for Elementor: A security weakness
ElementInvader Addons for Elementor is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
NVDPending
|
| Aug 27, 2025 |
CVE-2025-58205
ElementInvader Addons for Elementor: Cross-site scripting
ElementInvader Addons for Elementor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|
| May 19, 2025 |
CVE-2025-48288
ElementInvader Addons for Elementor: Cross-site scripting
ElementInvader Addons for Elementor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Jan 24, 2025 |
CVE-2025-24729
ElementInvader Addons for Elementor: Cross-site scripting
ElementInvader Addons for Elementor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVD5.4
|
| Jan 24, 2025 |
CVE-2025-24618
ElementInvader Addons for Elementor: A security weakness
ElementInvader Addons for Elementor is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVD8.8
|
| Jan 24, 2025 |
CVE-2025-24578
ElementInvader Addons for Elementor: Cross-site scripting
ElementInvader Addons for Elementor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVD5.4
|
| Jan 15, 2025 |
CVE-2025-22786
ElementInvader Addons for Elementor: Filesystem traversal
ElementInvader Addons for Elementor is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
|
See mitigation notes |
CVE7.5
NVD8.8
|
| Dec 12, 2024 |
CVE-2024-12059
ElementInvader Addons for Elementor: Sensitive information exposure
ElementInvader Addons for Elementor is affected by sensitive information exposure. Exploitation requires at least contributor-level access. Successful exploitation can disclose data that should not be available to the caller.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Oct 19, 2024 |
CVE-2024-9889
ElementInvader Addons for Elementor: Sensitive information exposure
ElementInvader Addons for Elementor is affected by sensitive information exposure. Exploitation requires at least contributor-level access. Successful exploitation can disclose data that should not be available to the caller.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Oct 16, 2024 |
CVE-2024-9888
ElementInvader Addons for Elementor: Cross-site scripting
ElementInvader Addons for Elementor is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE5.4
NVDPending
|
| Oct 05, 2024 |
CVE-2024-47630
ElementInvader Addons for Elementor: Cross-site scripting
ElementInvader Addons for Elementor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVD5.4
|
| Jul 20, 2024 |
CVE-2024-38705
ElementInvader Addons for Elementor: Cross-site scripting
ElementInvader Addons for Elementor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVD5.4
|
| Mar 16, 2024 |
CVE-2024-2308
ElementInvader Addons for Elementor: Cross-site scripting
ElementInvader Addons for Elementor is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVD5.4
|