Wpxpro

9 CVEs across 2 Wpxpro products. Browse Wpxpro vulnerabilities, severities, and proof-of-concept exploits.

Wpxpro products with known CVEs

ProductCVEs
Xpro Addons For Elementor8
Xpro Elementor Addons - Pro2
Wpxpro CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-0898Medium6.52026-05-27The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 1.4.7 via the Draw SVG widge…
CVE-2024-13808High8.82025-04-26The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.9 via the custom PHP widg…
CVE-2024-13649Medium6.42025-03-08The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to…
CVE-2024-12584Medium4.32025-01-08The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including…
CVE-2024-54253Medium6.52024-12-09Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons.This iss…
CVE-2024-10319Medium4.32024-11-05The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including…
CVE-2024-7791Medium6.42024-08-27The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘arrow’ parameter within the Post…
CVE-2024-43150Medium6.52024-08-12Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons allows Stored XSS.This…
CVE-2024-34570Medium5.92024-05-08Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons allows Stored XSS.This issue a…