Known Vulnerabilities for Addons by Themerex
Listed below are 1 of the newest known vulnerabilities associated with "Addons" by "Themerex".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-121579 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unli... | Not Provided | 2026-11-07 | 2026-11-07 |
| CVE-2026-120524 json | The News Kit Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formData' parame... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-119520 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Spectr... | Not Provided | 2026-11-07 | 2026-11-07 |
| CVE-2026-119519 json | Missing Authorization vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Exploiting Incorrectly Co... | Not Provided | 2026-11-06 | 2026-11-07 |
| CVE-2026-119502 json | Missing Authorization vulnerability in BdThemes Ultimate Store Kit Elementor Addons ultimate-store-kit allows Exploiting Inco... | Not Provided | 2026-11-07 | 2026-11-07 |
| CVE-2026-119501 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element Pack E... | Not Provided | 2026-11-07 | 2026-11-07 |
| CVE-2026-119365 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Media Player A... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-118205 json | The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Privilege ... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-118077 json | Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions. | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-118073 json | Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions. | Not Provided | 2026-10-29 | 2026-10-30 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Themerex | Addons | 1.70.3 | |||
| Application | Themerex | Addons | 1.6.67 | |||
| Application | Themerex | Addons | 1.6.66 | |||
| Application | Themerex | Addons | 1.6.65 | |||
| Application | Themerex | Addons | 1.6.62.3 | |||
| Application | Themerex | Addons | 1.6.62.1 | |||
| Application | Themerex | Addons | 1.6.61.3 | |||
| Application | Themerex | Addons | 1.6.61.2 | |||
| Application | Themerex | Addons | 1.6.61.1 | |||
| Application | Themerex | Addons | 1.6.61 | |||
| Application | Themerex | Addons | 1.6.60 | |||
| Application | Themerex | Addons | 1.6.59.3 | |||
| Application | Themerex | Addons | 1.6.59.2 | |||
| Application | Themerex | Addons | 1.6.59.1.1 | |||
| Application | Themerex | Addons | 1.6.59 | |||
| Application | Themerex | Addons | 1.6.58.2 | |||
| Application | Themerex | Addons | 1.6.57.4 | |||
| Application | Themerex | Addons | 1.6.57.3 | |||
| Application | Themerex | Addons | 1.6.57.2 | |||
| Application | Themerex | Addons | 1.6.57 |