Exclusiveaddons develops WordPress plugin products, with the durable signal centered on Exclusive Addons for Elementor, a page-builder extension. The vendor's disclosures cluster around web application input-handling and output-encoding issues, including cross-site scripting variants, improper input validation, and exposure of sensitive information, reflecting the common attack surface of user-extensible WordPress plugins and third-party integrations. These weakness classes are endemic to web-facing WordPress components where untrusted user input and plugin-to-core interactions create recurring validation and sanitization boundaries. Defenders should prioritize patching this plugin in environments where user-generated content or administrator-level access exists, and inventory instances across WordPress estates. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Exclusiveaddons over time
Signals from CVEs in this vendor scope (20 CVEs).
20 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-1234MEDIUM The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via data attribute in all versions up to, and including, 2.6.9 due to insuffici | Mar 13, 2024 | 5.4 | 33 | NO | YES |
CVE-2024-33914CRITICAL Missing Authorization vulnerability in Exclusive Addons Exclusive Addons Elementor.This issue affects Exclusive Addons Elementor: from n/a through 2.6.9.1. | May 3, 2024 | 9.8 | 25 | NO | NO |
CVE-2025-7498MEDIUM The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Widget in all versions up to, and including, 2.7.9.4 due to i | Aug 6, 2025 | 5.4 | 18 | NO | NO |
CVE-2025-1571MEDIUM The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Animated Text and Image Comparison Widgets in all versions up | Feb 28, 2025 | 5.4 | 18 | NO | NO |
CVE-2024-2028MEDIUM The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Covid-19 Stats Widget in all versions up to, and including, 2.6.9 due t | Mar 13, 2024 | 5.4 | 18 | NO | NO |
CVE-2024-1414MEDIUM The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Call To Action widget in all versions up to, and including, 2.6.9 due t | Mar 13, 2024 | 5.4 | 18 | NO | NO |
CVE-2024-10312MEDIUM The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.4 via the render function in eleme | Oct 29, 2024 | 4.3 | 17 | NO | NO |
CVE-2024-49292MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tim Strifler Exclusive Addons Elementor exclusive-addons-for-elementor allows | Oct 17, 2024 | 5.4 | 17 | NO | NO |
CVE-2024-4618MEDIUM The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Team Member widget in all versions up to, and including, 2.6.9.6 due to | May 15, 2024 | 5.4 | 17 | NO | NO |
CVE-2024-3489MEDIUM The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the Countdown Expired Title in all versions up to, and including, 2.6.9. | May 2, 2024 | 5.4 | 17 | NO | NO |
Signals from CVEs in this vendor scope (20 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Exclusiveaddons.
Media articles that mention a CVE ID that affects a product developed by Exclusiveaddons — matched by CVE ID, not by vendor name.