Log out
Get PRO

Latest

Input validation vulnerability in X Addons for Elementor 1.0.16

  • Severity: medium-risk
  • Status: Fixed
  • Publication: October 2, 2025

The X Addons for Elementor plugin, used on WordPress websites, has a security issue that could allow hackers to insert malicious scripts in pages. This can happen because the plugin does not properly clean or protect the Youtube Video ID field. It is possible for attackers with contributor-level access or higher to exploit this vulnerability and cause harm to users who visit the affected pages.

Detected in:

X Addons for Elementor fixed vulnerable versions: >= * <= 1.0.16

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.