Skip to content
OpenAdvisories

Product · WPZOOM

WPZOOM Addons for Elementor – Starter Templates & Widgets

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-126029

    The WPZOOM Addons for Elementor – Starter Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site S…

    WPZOOM WPZOOM Addons for Elementor – Starter Templates & Widgets Web / CMS
  • Medium 5.3
    CVE-2026-2295

    WPZOOM Addons for Elementor – Starter Templates & Widgets <= 1.3.2 - Unauthenticated Protected Post Exposure via ajax_post_grid_load_more

    The WPZOOM Addons for Elementor – Starter Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ajax_post_grid_load_more' function in all versions up to, and including, 1.3.2. This make…

    WPZOOM WPZOOM Addons for Elementor – Starter Templates & Widgets Web / CMS
  • Medium 6.4
    CVE-2024-5686

    WPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget

    The WPZOOM Addons for Elementor (Templates, Widgets) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ attribute within the plugin's Team Members widget in all versions up to, and including, 1.1.38 due to insufficient input sanit…

    WPZOOM WPZOOM Addons for Elementor – Starter Templates & Widgets Web / CMS
  • Medium 6.4
    CVE-2024-4370

    WPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box Widget

    The WPZOOM Addons for Elementor (Templates, Widgets) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widget Image Box in all versions up to, and including, 1.1.36 due to insufficient input sanitization and output escaping on…

    WPZOOM WPZOOM Addons for Elementor – Starter Templates & Widgets Web / CMS