WordPress security by component

PowerPack Elementor Addons (Free Widgets, Extensions and Templates)

Plugin description

PowerPack Elementor Addons (Free Widgets, Extensions and Templates) is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Apr 01, 2025; the highest CVE/CNA score is 6.4.

Plugin slug: powerpack-elementor-addons-free-widgets-extensions-and-templates

Latest vulnerability

CVE-2025-1512: PowerPack Elementor Addons (Free Widgets, Extensions and Templates): Cross-site scripting

PowerPack Elementor Addons (Free Widgets, Extensions and Templates) is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedApr 01, 2025

Safe version guidanceSee mitigation notes

		Safe version
Apr 01, 2025	CVE-2025-1512 PowerPack Elementor Addons (Free Widgets, Extensions and Templates): Cross-site scripting PowerPack Elementor Addons (Free Widgets, Extensions and Templates) is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.4 NVDPending
Dec 06, 2024	CVE-2024-10692 PowerPack Elementor Addons (Free Widgets, Extensions and Templates): A security weakness PowerPack Elementor Addons (Free Widgets, Extensions and Templates) is affected by a security weakness. Exploitation requires at least contributor-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE4.3 NVDPending