Wpbits

11 CVEs across 2 Wpbits products. Browse Wpbits vulnerabilities, severities, and proof-of-concept exploits.

Wpbits products with known CVEs

ProductCVEs
Wpbits Addons For Elementor Page Builder11
Wpbits Addons For Elementor Page Builder6
Wpbits CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-13362Medium6.12026-05-01Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient inp…
CVE-2026-39703Medium6.52026-04-08Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbits WPBITS Addons For Elementor Page Builder wpbits-ad…
CVE-2025-9082Medium6.42026-01-28The WPBITS Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget parameters in versions up to, and includi…
CVE-2024-37945Medium6.52025-08-14Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbits WPBITS Addons For Elementor Page Builder wpbits-ad…
CVE-2025-22316Medium5.92025-01-07Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbits WPBITS Addons For Elementor Page Builder wpbits-ad…
CVE-2024-56285Medium6.52025-01-07Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbits WPBITS Addons For Elementor Page Builder wpbits-ad…
CVE-2024-8962Medium6.42024-12-04The WPBITS Addons For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and…
CVE-2022-4974Medium6.32024-10-16The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to…
CVE-2024-4862Medium6.42024-07-09The WPBITS Addons For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and i…
CVE-2024-32593Medium6.52024-04-18Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPBits WPBITS Addons For Elementor Page Builder allows St…
CVE-2024-2129Medium6.42024-03-20The WPBITS Addons For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's heading widget in all versions…