CVE-2025-7498

MEDIUM CVSS 6.4 Aug 6, 2025

This vulnerability allows authenticated WordPress users with Contributor-level access or higher to inject malicious scripts into pages using the Exclusive Addons for Elementor plugin's Countdown Widge...

CVE-2025-4783

MEDIUM CVSS 6.4 May 27, 2025

The Exclusive Addons for Elementor WordPress plugin has a stored XSS vulnerability in its Countdown Timer Widget. Authenticated attackers with Contributor access or higher can inject malicious scripts...

CVE-2025-1571

MEDIUM CVSS 6.4 Feb 28, 2025

This vulnerability allows authenticated WordPress users with contributor-level access or higher to inject malicious scripts into web pages using the Exclusive Addons for Elementor plugin. The scripts ...

CVE-2024-10312

MEDIUM CVSS 4.3 Oct 29, 2024

The Exclusive Addons for Elementor WordPress plugin exposes sensitive template data through a vulnerability in its tabs component. Authenticated attackers with Contributor-level access or higher can e...

CVE-2024-5332

MEDIUM CVSS 6.4 Jun 26, 2024

This vulnerability allows authenticated WordPress users with contributor-level access or higher to inject malicious scripts into pages using the Exclusive Addons for Elementor plugin's Card widget. Th...

CVE-2024-4618

MEDIUM CVSS 6.4 May 15, 2024

This vulnerability allows authenticated WordPress users with contributor-level access or higher to inject malicious scripts into web pages using the Exclusive Addons for Elementor plugin's Team Member...

CVE-2024-33914

MEDIUM CVSS 4.3 May 3, 2024

This CVE describes a Missing Authorization vulnerability in the Exclusive Addons Elementor WordPress plugin. It allows unauthorized users to duplicate posts without proper permissions. All WordPress s...

CVE-2024-3489

MEDIUM CVSS 6.4 May 2, 2024

This vulnerability allows unauthenticated attackers to perform reflected cross-site scripting attacks via the Countdown Expired Title parameter in the Exclusive Addons for Elementor WordPress plugin. ...

CVE-2024-2751