xpro_addons_140+_widgets_for_elementor vulnerabilities

CVEs whose affected-version data names the xpro_addons_140+_widgets_for_elementor package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-84088Medium· 6.8

1w ago

The Xpro Addons — 140+ Widgets for Elementor WordPress plugin before 1.7.9 does not validate or sanitize a widget link setting before storing and using it in a JavaScript navigation call, allowing users with the contributor role and abov…

The Xpro Addons — 140+ Widgets for Elementor WordPress plugin before 1.7.9 does not validate or sanitize a widget link setting before storing and using it in a JavaScript navigation call, allowing users with the contributor role and abov…

▾ SunlitEPSS 0.40%via NVD