Exposure of Essential Addons for Elementor

WordPress plugins
31
exposure score
57,864
sites use
0
exploited
1
critical
Vexday analysis

O plugin Essential Addons for Elementor acumula 13 CVEs catalogadas, com uma CVE de severidade crítica e uma surgida nos últimos 90 dias, indicando que a superfície de risco permanece ativa. Nenhuma das vulnerabilidades consta atualmente no catálogo KEV da CISA, taxa abaixo da média geral do catálogo, o que sugere ausência de exploração confirmada em ambientes reais até o momento. O tipo de falha mais recorrente é CWE-79 (Cross-Site Scripting), padrão que tende a ser explorado em ataques de injeção de conteúdo e sequestro de sessão. A CVE mais perigosa no cenário atual, CVE-2023-32243, apresenta escore EPSS de 0,76 — valor elevado que indica alta probabilidade de exploração ativa por parte da comunidade de ameaças, merecendo atenção prioritária em qualquer ambiente que utilize o plugin.

CVEs

15 results
CVE-2023-32243CRITICALWordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege EscalationEPSS 75.5%CVE-2022-0320—Essential Addons for Elementor < 5.0.5 - Unauthenticated LFIEPSS 2.0%CVE-2025-24752HIGHWordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 1.2%CVE-2023-41955HIGHWordPress Essential Addons for Elementor plugin <= 5.8.8 - Contributor+ Privilege Escalation vulnerabilityEPSS 0.6%CVE-2021-24255—Essential Addons for Elementor < 4.5.4 - Contributor+ Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2025-39589MEDIUMWordPress Essential Addons for Elementor plugin <= 6.1.9 - Sensitive Data Exposure VulnerabilityEPSS 0.4%CVE-2025-39590MEDIUMWordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2024-39649MEDIUMWordPress Essential Addons for Elementor plugin <= 5.9.26 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-56063MEDIUMWordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-13345MEDIUMEssential Addons for Elementor - Lite < 6.6.10 - Unauthenticated Draft/Private WooCommerce Product Disclosure via Compare TableEPSS 0.2%CVE-2026-23543MEDIUMWordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-25440MEDIUMWordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-64352LOWWordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-13344MEDIUMEssential Addons for Elementor - Lite < 6.6.10 - Contributor+ Stored XSS via Pricing Table Title TagEPSS 0.2%CVE-2025-69092MEDIUMWordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%