Known vulnerabilities in the Xpro Elementor Addons plugin
16 security advisories have been published for the Xpro Elementor Addons plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Xpro Elementor Addons - Broken Access Control (CVE-2026-7105) MEDIUM
- Xpro Elementor Addons - Cross-Site Scripting (XSS) (CVE-2026-11614) MEDIUM
- Xpro Elementor Addons - Broken Access Control (CVE-2025-15369) MEDIUM
- Xpro Elementor Addons - Cross-Site Scripting (XSS) (CVE-2025-13368) MEDIUM
- Xpro Elementor Addons - Cross-Site Scripting (XSS) (CVE-2026-2949) MEDIUM
- Xpro Elementor Addons - Cross-Site Scripting (XSS) (CVE-2025-14149) MEDIUM
- Xpro Elementor Addons - Arbitrary File Upload (CVE-2025-69312) CRITICAL
- Xpro Elementor Addons - Cross-Site Scripting (XSS) (CVE-2025-63044) MEDIUM
- Xpro Elementor Addons - Cross-Site Scripting (XSS) (CVE-2025-58195) MEDIUM
- Xpro Elementor Addons - Cross-Site Scripting (XSS) (CVE-2025-32163) MEDIUM
- Xpro Elementor Addons - Cross-Site Scripting (XSS) (CVE-2025-2108) MEDIUM
- Xpro Elementor Addons - Information Disclosure (CVE-2024-12584) MEDIUM
- Xpro Elementor Addons - Information Disclosure (CVE-2024-10319) MEDIUM
- Xpro Elementor Addons - Cross-Site Scripting (XSS) (CVE-2024-7791) MEDIUM
- Xpro Elementor Addons - PHP Object Injection (CVE-2024-4471) HIGH
- Xpro Elementor Addons - Cross-Site Scripting (XSS) (CVE-2024-4440) MEDIUM