SecAlerts
p

premium addons

Security Risk Profile

40
/100
medium

Security Risk Score

Comprehensive risk assessment based on 12 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from March 13, 2024 to present

12
Total CVEs
1
Critical+High
0
Exploited
0
Unpatched

Threat Assessment

Avg CVSS
6.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
40/100
medium

Severity Distribution

Critical
0
High
1
Medium
11
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
0

Age Distribution

Common Weaknesses (CWE)

1
XSS
10

Most Affected Products

1. Premium Addons Premium Addons PRO8
2. Leap13 Premium Addons Wordpress7
3. Leap13 Premium Addons For Elementor Wordpress5
4. Premium Addons Premium Addons for Elementor4
5. WordPress WordPress2

Recent Vulnerabilities

See more →
CVE-2024-11937
CVSS 6.4medium

Premium Addons for Elementor <= 4.10.69 - Authenticated (Contributor+) Stored Cross-Site Scripting

Jul 4, 2025
CVE-2025-4774
CVSS 6.4medium

Premium Addons for Elementor <= 4.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

Jun 10, 2025🔧 No Patch
CVE-2024-10266
CVSS 6.4medium

Premium Addons for Elementor <= 4.10.60 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Box Widget

Oct 29, 2024
CVE-2021-4445
CVSS 6.5medium

Premium Addons for Elementor <= 4.5.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update

Oct 16, 2024
CVE-2023-37869
CVSS 8.8high

WordPress Premium Addons PRO plugin <= 2.9.0 - Broken Access Control vulnerability

Jun 19, 2024
CVE-2024-2399
CVSS 6.4medium

Premium Addons for Elementor <= 4.10.23 - Authenticated (Contributor+) Stored Cross-Site Scripting

Mar 15, 2024
CVE-2024-2000
CVSS 6.4medium

Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multi Scroll Widget

Mar 13, 2024🔧 No Patch
CVE-2024-1997
CVSS 6.4medium

Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Messenger Chat Widget

Mar 13, 2024🔧 No Patch
CVE-2024-2238
CVSS 6.4medium

Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Mouse Cursor Module

Mar 13, 2024🔧 No Patch
CVE-2024-1996
CVSS 6.4medium

Premium Addons for Elementor PRO <= 2.9.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget link

Mar 13, 2024🔧 No Patch

Monitor premium addons in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

premium addons Security Vulnerabilities & Risk Score | 12 CVEs | SecAlerts - SecAlerts