Xpro Elementor Addons

Xpro

Developer

1.4.24

Latest version

30,000

Installations

No date

Last updated

WordPress Plugin

No VDP

Claim ownership

Report vulnerability

Vulnerabilities

Security Contributors

Vulnerability history

0 present

15 fixed

1 Mitigation rules

Arbitrary File Upload vulnerability
<= 1.4.19.1
Jan 19, 2026
Authenticated (Contributor+) Stored Cross-Site Scripting via 'Site Title' widget vulnerability
<= 1.4.7.1
Dec 31, 2025
Cross Site Scripting (XSS) vulnerability
<= 1.4.19.1
Dec 6, 2025
Cross Site Scripting (XSS) Vulnerability
<= 1.4.17
Aug 27, 2025
Cross Site Scripting (XSS) vulnerability
<= 1.4.10
Apr 4, 2025
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
<= 1.4.6.7
Mar 8, 2025
Authenticated (Contributor+) Post Disclosure via Post Duplication vulnerability
<= 1.4.6.2
Jan 7, 2025
Cross Site Scripting (XSS) vulnerability
<= 1.4.6.5
Dec 5, 2024
Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template vulnerability
<= 1.4.6
Nov 5, 2024
Authenticated (Contributor+) Stored Cross-Site Scripting via Post Grid Widget vulnerability
<= 1.4.4.3
Aug 27, 2024
Cross Site Scripting (XSS) vulnerability
<= 1.4.4.2
Aug 7, 2024
Authenticated (Contributor+) PHP Object Injection vulnerability
<= 1.4.3.1
May 24, 2024
Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets vulnerability
<= 1.4.3
May 15, 2024
Cross Site Scripting (XSS) vulnerability
<= 1.4.3.1
May 7, 2024
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
<= 1.4.2
Mar 29, 2024