Xpro

24 CVEs across 4 Xpro products. Browse Xpro vulnerabilities, severities, and proof-of-concept exploits.

Xpro products with known CVEs

ProductCVEs
Xpro Addons — 140+ Widgets For Elementor14
Xpro Elementor Addons8
Xpro Addons For Beaver Builder – Lite2
Xpro Theme Builder2
Xpro CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-7105Medium4.32026-08-05The Xpro Addons plugin for WordPress is vulnerable to unauthorized creation of data due to a missing capability check on the `get_menu_content_editor()` functi…
CVE-2026-11614Medium6.42026-06-24The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_attributes' parameter in all ver…
CVE-2025-15369Medium5.32026-05-20The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the g…
CVE-2026-45214High8.52026-05-12Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows B…
CVE-2025-13368Medium6.42026-04-04The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing Widget's 'onClick Event' setting…
CVE-2026-2949Medium6.42026-04-04The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Icon Box widget in versions up to, and i…
CVE-2026-32395Medium5.32026-03-13Missing Authorization vulnerability in Xpro Xpro Addons For Beaver Builder – Lite xpro-addons-beaver-builder-elementor allows Exploiting Incorrectly Configured…
CVE-2025-14149Medium6.42026-02-27The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Scroller widget box link…
CVE-2025-69312Critical9.12026-01-22Unrestricted Upload of File with Dangerous Type vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Upload a Web Shell to a Web Server.Thi…
CVE-2025-63044Medium6.52025-12-09Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows D…
CVE-2025-58198Medium6.52025-08-27Missing Authorization vulnerability in Xpro Xpro Theme Builder xpro-theme-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This…
CVE-2025-58195Medium6.52025-08-27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows S…
CVE-2025-48232Medium6.52025-05-19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Addons For Beaver Builder – Lite xpro-addons-be…
CVE-2025-32201Medium4.32025-04-04Missing Authorization vulnerability in Xpro Xpro Theme Builder xpro-theme-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This…
CVE-2025-32163Medium6.52025-04-04Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows S…
CVE-2025-2108Medium6.42025-03-20The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Site Title’ widget's 'title_tag'…
CVE-2024-13649Medium6.42025-03-08The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to…
CVE-2024-12584Medium4.32025-01-08The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including…
CVE-2024-54253Medium6.52024-12-09Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons.This iss…
CVE-2024-10319Medium4.32024-11-05The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including…
CVE-2024-7791Medium6.42024-08-27The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘arrow’ parameter within the Post…
CVE-2024-43150Medium6.52024-08-12Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons allows Stored XSS.This…
CVE-2024-4471High8.02024-05-23The 140+ Widgets | Best Addons For Elementor – FREE for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.3.1 via deseriali…
CVE-2024-4440Medium6.42024-05-14The 140+ Widgets | Best Addons For Elementor – FREE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions…
CVE-2024-34570Medium5.92024-05-08Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons allows Stored XSS.This issue a…
CVE-2024-2250Medium6.42024-03-29The 130+ Widgets | Best Addons For Elementor – FREE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions…