Skip to content
OpenAdvisories

Vendor

Xpro

27 known vulnerabilities.

Products

Xpro Addons — 140+ Widgets for Elementor 14 Xpro Elementor Addons 9 Xpro Addons For Beaver Builder – Lite 2 Xpro Theme Builder 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-114177

    WordPress Xpro Elementor Addons plugin <= 1.7.10 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Cross Site Request Forgery.This issue affects Xpro Elementor Addons: from n/a through 1.7.10.

    Xpro Xpro Elementor Addons
  • High 8.5
    CVE-2026-45214

    WordPress Xpro Elementor Addons plugin <= 1.5.1 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Blind SQL Injection.This issue affects Xpro Elementor Addons: from n/a through <= 1.5.1.

    Xpro Xpro Elementor Addons
  • High 8.0
    CVE-2024-4471

    140+ Widgets | Best Addons For Elementor – FREE <= 1.4.3.1 - Authenticated (Contributor+) PHP Object Injection

    The 140+ Widgets | Best Addons For Elementor – FREE for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.3.1 via deserialization of untrusted input in the 'export_content' function. This allows authenticated attackers, wit…

    Xpro Xpro Addons — 140+ Widgets for Elementor