Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Addon Elements For Elementor Page Builder - Information Disclosure (CVE-2023-4723)
The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.12.7 via the ajax_eae_post_data function. This can allow unauthenticated attackers to extract sensitive data including post/page ids and titles including those of with pending/draft/future/private status.
PLUGIN
Addon Elements For Elementor Page Builder
CVE-2023-4723
Risk Score
Threat Entry
Updated 2026-06-17
Addon Elements For Elementor Page Builder - Cross-Site Scripting (XSS) (CVE-2023-5381)
The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.12.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
PLUGIN
Addon Elements For Elementor Page Builder
CVE-2023-5381
Risk Score