PLUGIN SECURITY
Is Xpro Elementor Addons safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Xpro Elementor Addons WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
xpro-elementor-addons
Known vulnerabilities
- CVE-2024-2250 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.3 (XSS) · Medium
- CVE-2024-34570 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.3.1 (XSS) · Medium
- CVE-2024-4440 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.3.1 (XSS) · Medium
- CVE-2024-4471 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.3.2 (Insecure Deserialization) · High
- CVE-2024-43150 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.4.3 (XSS) · Medium
+ 16 more known vulnerabilities
- CVE-2024-7791 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.4.4 (XSS) · Medium
- CVE-2024-10319 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.6.1 (CWE-200) · Medium
- CVE-2024-54253 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.6.6 (XSS) · Medium
- CVE-2024-12584 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.6.3 (CWE-200) · Medium
- CVE-2024-13649 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.6.8 (XSS) · Medium
- CVE-2025-2108 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.8 (XSS) · Medium
- CVE-2025-32163 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.11 (XSS) · Medium
- CVE-2025-58195 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.18 (XSS) · Medium
- CVE-2025-63044 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.20 (XSS) · Medium
- CVE-2025-69312 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.20 (Unrestricted File Upload) · Critical
- CVE-2025-14149 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.25 (XSS) · Medium
- CVE-2025-13368 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.21 (XSS) · Medium
- CVE-2026-2949 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.25
- CVE-2026-45214 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.5.2 · High
- CVE-2025-15369 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.5.1 (Missing Authorization) · Medium
- CVE-2026-11614 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.7.3 (XSS) · Medium
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.