Elementinvader

11 CVEs across 3 Elementinvader products. Browse Elementinvader vulnerabilities, severities, and proof-of-concept exploits.

Elementinvader products with known CVEs

ProductCVEs
Elementinvader Addons For Elementor10
Elementinvader Addons For Elementor5
Widget Detector For Elementor1
Elementinvader CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-24729Medium6.52025-01-24Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader ElementInvader Addons for Elementor eleme…
CVE-2025-24618Medium4.32025-01-24Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Exploiting Incorrectly Co…
CVE-2025-24578Medium6.52025-01-24Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader ElementInvader Addons for Elementor eleme…
CVE-2025-22786High7.52025-01-15Path Traversal: '.../...//' vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows PHP Local File Incl…
CVE-2024-12059Medium4.32024-12-12The ElementInvader Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.1 via th…
CVE-2024-9889Medium4.32024-10-19The ElementInvader Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.9 via th…
CVE-2022-4974Medium6.32024-10-16The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to…
CVE-2024-9888Medium5.42024-10-16The ElementInvader Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's contact form widget redirect URL in…
CVE-2024-47630Medium6.52024-10-05Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader ElementInvader Addons for Elementor eleme…
CVE-2024-38705Medium6.52024-07-20Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ElementInvader ElementInvader Addons for Elementor…
CVE-2024-2308Medium6.42024-03-16The ElementInvader Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button link in the EliSlider in all versions…