High · 7.1 CVE-2023-32241 EUVD-2023-36498GHSA-8fp7-cc4g-795g

WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Cross Site Scripting (XSS)

Published Aug 29, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPDeveloper Essential Addons for Elementor Pro plugin <= 5.4.8 versions.

Vendor	Product	Affected	Fixed
WPDeveloper	Essential Addons for Elementor Pro	≤ 5.4.8	—