WordPress exclusive-addons-for-elementor has 17 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2024-1234 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via data attribute in all versions up t | medium | 6.4 | <2.6.9.1 | 2.6.9.1 |
| CVE-2024-3489 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the Countdown Expired Title in a | medium | 6.4 | <2.6.9.5 | 2.6.9.5 |
| CVE-2024-2028 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Covid-19 Stats Widget in all ve | medium | 6.4 | <2.6.9.1 | 2.6.9.1 |
| CVE-2024-10312 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including | medium | 4.3 | <2.7.5 | 2.7.5 |
| CVE-2024-2503 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Grid Widget in all version | medium | 6.4 | <2.6.9.3 | 2.6.9.3 |
| CVE-2024-1413 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Timer widget in all v | medium | 6.4 | <2.6.9.1 | 2.6.9.1 |
| CVE-2024-1414 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Call To Action widget in all ve | medium | 6.4 | <2.6.9.1 | 2.6.9.1 |
| CVE-2024-3985 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Call to Action widget | medium | 6.4 | <2.6.9.5 | 2.6.9.5 |
| CVE-2024-0823 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Link To' url in carousels in a | medium | 5.4 | <=2.6.8 | – |
| CVE-2024-4618 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Team Member widget in all versi | medium | 6.4 | <2.6.9.7 | 2.6.9.7 |
| CVE-2024-0824 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Link Anything functionality in | medium | 6.4 | <=2.6.8 | – |
| CVE-2024-2750 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL attribute of the Button wid | medium | 6.4 | <2.6.9.4 | 2.6.9.4 |
| CVE-2024-2751 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘exad_infobox_animating_mask_st | medium | 6.4 | <2.6.9.3 | 2.6.9.3 |
| CVE-2025-1571 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Animated Text and Imag | medium | 6.4 | <2.7.7 | 2.7.7 |
| CVE-2024-5332 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Card widget in all ver | medium | 6.4 | <2.6.9.9 | 2.6.9.9 |
| CVE-2025-4783 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML attributes of the Countdow | medium | 6.4 | <2.7.9.2 | 2.7.9.2 |
| CVE-2025-7498 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Widget in all version | medium | 6.4 | <2.7.9.5 | 2.7.9.5 |
Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden wordpress /var/www/html
Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.
Install docs How findings are ranked