Skip to content
OpenAdvisories

Vendor

wowdevs

11 known vulnerabilities.

Products

Sky Addons – Elementor Addons with Widgets & Templates 6 Sky Addons for Elementor 5
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-7475

    Sky Addons <= 3.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Script

    The Sky Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `sky-custom-scripts` custom post type in all versions up to, and including, 3.3.2. This is due to the custom post type being registered with `capability_type => 'post'` a…

    wowdevs Sky Addons – Elementor Addons with Widgets & Templates Web / CMS
  • Medium 6.4
    CVE-2025-8216

    Sky Addons for Elementor <= 3.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

    The Sky Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Multiple widgets in all versions up to, and including, 3.1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes …

    wowdevs Sky Addons – Elementor Addons with Widgets & Templates Web / CMS
  • Medium 6.5
    CVE-2025-46260

    WordPress Sky Addons for Elementor plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wowDevs Sky Addons for Elementor sky-elementor-addons allows Stored XSS.This issue affects Sky Addons for Elementor: from n/a through <= 3.0.1.

    wowdevs Sky Addons for Elementor
  • Medium 4.3
    CVE-2024-9542

    Sky Addons for Elementor <= 2.6.1 - Authenticated (Contributor+) Sensitive Information Exposure via Content Switcher Widget Elementor Template

    The Sky Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.1 via the render function in modules/content-switcher/widgets/content-switcher.php. This makes it possible for authenti…

    wowdevs Sky Addons – Elementor Addons with Widgets & Templates Web / CMS
  • Medium 6.5
    CVE-2024-50433

    WordPress Sky Addons for Elementor plugin <= 2.5.15 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wowDevs Sky Addons for Elementor sky-elementor-addons allows Cross-Site Scripting (XSS).This issue affects Sky Addons for Elementor: from n/a through <= 2.5.…

    wowdevs Sky Addons for Elementor
  • Medium 6.5
    CVE-2024-47332

    WordPress Sky Addons for Elementor plugin <= 2.5.11 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wowDevs Sky Addons for Elementor sky-elementor-addons allows Stored XSS.This issue affects Sky Addons for Elementor: from n/a through <= 2.5.11.

    wowdevs Sky Addons for Elementor
  • Medium 6.5
    CVE-2024-38687

    WordPress Sky Addons for Elementor plugin <= 2.5.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wowDevs Sky Addons for Elementor sky-elementor-addons.This issue affects Sky Addons for Elementor: from n/a through <= 2.5.5.

    wowdevs Sky Addons for Elementor
  • Medium 6.4
    CVE-2024-2286

    Sky Addons for Elementor <= 2.4.0 - Authenticated(Contributor+) Stored Cross-site scripting via Wrapper Link URL

    The Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wrapper link URL value in all versions up to, and inclu…

    wowdevs Sky Addons – Elementor Addons with Widgets & Templates Web / CMS