SecAlerts
x

xpro

Security Risk Profile

72
/100
high

Security Risk Score

Comprehensive risk assessment based on 13 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from May 8, 2024 to present

13
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched

Threat Assessment

Avg CVSS
6.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
72/100
high
🆕 1Fresh (<7d)📈 1 in Last 30 Days

Severity Distribution

Critical
0
High
2
Medium
11
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
4

Age Distribution

Common Weaknesses (CWE)

1
XSS
8
2
CSRF
1
3
Code Injection
1
4
Infoleak
1

Most Affected Products

1. Wpxpro Xpro Addons For Elementor Wordpress7
2. Xpro Elementor Addons3
3. Xpro Xpro Theme Builder2
4. Xpro Xpro Addons For Elementor – FREE2
5. Xpro Addons For Elementor – FREE2

Recent Vulnerabilities

See more →
CVE-2026-114177
CVSS 8.8high

WordPress Xpro Elementor Addons plugin <= 1.7.10 - Cross Site Request Forgery (CSRF) vulnerability

Oct 22, 2026🔧 No Patch
CVE-2025-58198
CVSS 6.5medium

WordPress Xpro Theme Builder Plugin <= 1.2.9 - Broken Access Control Vulnerability

Aug 27, 2025
CVE-2025-58195
CVSS 6.5medium

WordPress Xpro Elementor Addons Plugin <= 1.4.17 - Cross Site Scripting (XSS) Vulnerability

Aug 27, 2025
CVE-2025-48232
CVSS 6.5EPSS 0%medium

WordPress Xpro Addons For Beaver Builder – Lite plugin <= 1.5.5 - Cross Site Scripting (XSS) Vulnerability

May 19, 2025
CVE-2024-13808
CVSS 8.8high

Xpro Elementor Addons - Pro <= 1.4.9 - Authenticated (Contributor+) Remote Code Execution

Apr 26, 2025🔧 No Patch
CVE-2025-32201
CVSS 4.3EPSS 0%medium

WordPress Xpro Theme Builder Plugin <= 1.2.8.4 - Broken Access Control vulnerability

Apr 4, 2025🔧 No Patch
CVE-2025-2108
CVSS 6.4medium

140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Site Title' widget

Mar 20, 2025🔧 No Patch
CVE-2024-13649
CVSS 6.4medium

140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

Mar 8, 2025
CVE-2024-12584
CVSS 6.5medium

140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.2 - Authenticated (Contributor+) Post Disclosure via Post Duplication

Jan 8, 2025
CVE-2024-54253
CVSS 6.5medium

WordPress Xpro Addons For Elementor plugin <= 1.4.6.5 - Cross Site Scripting (XSS) vulnerability

Dec 9, 2024🔧 No Patch

Monitor xpro in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

xpro Security Vulnerabilities & Risk Score | 13 CVEs | SecAlerts - SecAlerts