← WordPress Vulnerabilities
WordPress security by component

The Plus Addons for Elementor Pro

The Plus Addons for Elementor Pro is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Jan 07, 2026; the highest CVE/CNA score is 8.6.

Plugin slug: theplus-elementor-addon

CVE-2025-46434: The Plus Addons for Elementor Pro: A security weakness

The Plus Addons for Elementor Pro is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedJan 07, 2026
Safe version guidanceSee mitigation notes
Known source slugs: theplus-elementor-addon, theplus_elementor_addon
Safe version
Jan 07, 2026 CVE-2025-46434
The Plus Addons for Elementor Pro: A security weakness
The Plus Addons for Elementor Pro is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE6.5
NVDPending
Jul 01, 2025 CVE-2025-46259
The Plus Addons for Elementor Pro: A security weakness
The Plus Addons for Elementor Pro is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.4
NVDPending
May 17, 2024 CVE-2023-47178
The Plus Addons for Elementor Pro: Filesystem traversal
The Plus Addons for Elementor Pro is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE8.6
NVD9.8