CVEs we hold for Xpro

Records whose assigning authority named Xpro as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-84146Xpro Elementor Addons < 1.7.8 - Unauthenticated Draft/Private Product Disclosure via Quick ViewUnknown Xpro Addons — 140+ Widgets for Elementor

CVE-2026-84088Xpro Elementor Addons < 1.7.9 - Contributor+ Stored XSS via Interactive Circle WidgetUnknown Xpro Addons — 140+ Widgets for Elementor

CVE-2026-83547Xpro Elementor Addons 1.6.0 - 1.7.3 - Contributor+ Stored XSS via Multiple WidgetsUnknown Xpro Addons

CVE-2026-7105Xpro Addons <= 1.5.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Creation via…Xpro Addons — 140+ Widgets for Elementor

CVE-2026-45214WordPress Xpro Elementor Addons plugin <= 1.5.1 - SQL Injection vulnerabilityXpro Elementor Addons

CVE-2026-32395WordPress Xpro Addons For Beaver Builder – Lite plugin <= 1.5.6 - Broken Access Control vulnerabilityXpro Addons For Beaver Builder – Lite

CVE-2026-2949Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon…Xpro Addons — 140+ Widgets for Elementor

CVE-2026-11614Xpro Addons <= 1.7.2 - Authenticated (Author+) Stored Cross-Site Scripting via 'custom_attributes' Parameter of…Xpro Addons — 140+ Widgets for Elementor

CVE-2025-69312WordPress Xpro Elementor Addons plugin <= 1.4.19.1 - Arbitrary File Upload vulnerabilityXpro Elementor Addons

CVE-2025-63044WordPress Xpro Elementor Addons plugin <= 1.4.19.1 - Cross Site Scripting (XSS) vulnerabilityXpro Elementor Addons

CVE-2025-58198WordPress Xpro Theme Builder Plugin <= 1.2.9 - Broken Access Control VulnerabilityXpro Theme Builder

CVE-2025-58195WordPress Xpro Elementor Addons Plugin <= 1.4.17 - Cross Site Scripting (XSS) VulnerabilityXpro Elementor Addons

CVE-2025-48232WordPress Xpro Addons For Beaver Builder – Lite plugin <= 1.5.5 - Cross Site Scripting (XSS) VulnerabilityXpro Addons For Beaver Builder – Lite

CVE-2025-32201WordPress Xpro Theme Builder Plugin <= 1.2.8.4 - Broken Access Control vulnerabilityXpro Theme Builder

CVE-2025-32163WordPress Xpro Elementor Addons plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerabilityXpro Elementor Addons

CVE-2025-2108140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting…Xpro Addons — 140+ Widgets for Elementor

CVE-2025-15369Xpro Addons — 140+ Widgets for Elementor <= 1.5.0 - Missing Authorization to Unauthenticated Xpro Template CreationXpro Addons — 140+ Widgets for Elementor

CVE-2025-14149Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image…Xpro Addons — 140+ Widgets for Elementor

CVE-2025-13368Xpro Addons — 140+ Widgets for Elementor <= 1.4.20 - Authenticated (Contributor+) Stored Cross-Site ScriptingXpro Addons — 140+ Widgets for Elementor

CVE-2024-7791140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting…Xpro Addons — 140+ Widgets for Elementor

CVE-2024-54253WordPress Xpro Addons For Elementor plugin <= 1.4.6.5 - Cross Site Scripting (XSS) vulnerabilityXpro Elementor Addons

CVE-2024-4471140+ Widgets | Best Addons For Elementor – FREE <= 1.4.3.1 - Authenticated (Contributor+) PHP Object InjectionXpro Addons — 140+ Widgets for Elementor

CVE-2024-4440140+ Widgets | Best Addons For Elementor – FREE <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via…Xpro Addons — 140+ Widgets for Elementor

CVE-2024-43150WordPress Xpro Elementor Addons plugin <= 1.4.4.2 - Cross Site Scripting (XSS) vulnerabilityXpro Elementor Addons

CVE-2024-34570WordPress Xpro Elementor Addons plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerabilityXpro Elementor Addons

CVE-2024-2250130+ Widgets | Best Addons For Elementor – FREE <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingXpro Addons — 140+ Widgets for Elementor

CVE-2024-13649140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.7 - Authenticated (Contributor+) Stored Cross-Site ScriptingXpro Addons — 140+ Widgets for Elementor

CVE-2024-12584140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.2 - Authenticated (Contributor+) Post Disclosure via Post…Xpro Addons — 140+ Widgets for Elementor

CVE-2024-10319140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure…Xpro Addons — 140+ Widgets for Elementor

29 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.