Pencilwp

4 CVEs across 2 Pencilwp products. Browse Pencilwp vulnerabilities, severities, and proof-of-concept exploits.

Pencilwp products with known CVEs

ProductCVEs
X Addons For Elementor4
X Addons For Elementor1
Pencilwp CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-24605Medium4.32026-01-23Missing Authorization vulnerability in pencilwp X Addons for Elementor x-addons-elementor allows Exploiting Incorrectly Configured Access Control Security Leve…
CVE-2026-22518Medium6.52026-01-08Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pencilwp X Addons for Elementor x-addons-elementor allows…
CVE-2025-9204Medium6.42025-10-03The X Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Youtube Video ID field in all versions up to, and includin…
CVE-2025-48132Medium6.52025-05-16Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pencilwp X Addons for Elementor x-addons-elementor allows…