Elementinvader Elementinvader Addons For Elementor — known CVE vulnerabilities

Every CVE whose affected-product data names Elementinvader Elementinvader Addons For Elementor, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2025-22786 — CVSS 7.5 (high): Path Traversal: '.../...//' vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows…
• CVE-2024-38705 — CVSS 6.5 (medium): Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ElementInvader ElementInvader…
• CVE-2025-24729 — CVSS 6.5 (medium): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader ElementInvader Addons…
• CVE-2025-24578 — CVSS 6.5 (medium): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader ElementInvader Addons…
• CVE-2024-47630 — CVSS 6.5 (medium): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader ElementInvader Addons…
• CVE-2024-2308 — CVSS 6.4 (medium): The ElementInvader Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button link in the…
• CVE-2024-9888 — CVSS 5.4 (medium): The ElementInvader Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's contact form…
• CVE-2024-9889 — CVSS 4.3 (medium): The ElementInvader Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and…
• CVE-2024-12059 — CVSS 4.3 (medium): The ElementInvader Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and…
• CVE-2025-24618 — CVSS 4.3 (medium): Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows…