Moveaddons develops WordPress plugin extensions, particularly add-ons for the Elementor page builder, that extend functionality for content creators and site builders. The vendor's vulnerability footprint centers on web application input-handling and access-control issues, with recurring weaknesses in cross-site scripting, sensitive information exposure, and missing authorization checks that are characteristic of WordPress plugin development. Current exploitation activity and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Moveaddons over time
Signals from CVEs in this vendor scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-30525HIGH Missing Authorization vulnerability in moveaddons Move Addons for Elementor.This issue affects Move Addons for Elementor: from n/a through 1.2.9. | Jun 4, 2024 | 7.3 | 22 | NO | NO |
CVE-2024-29920MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move | Mar 27, 2024 | 5.4 | 18 | NO | NO |
CVE-2024-56254MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in moveaddons Move Addons for Elementor move-addons allows Stored XSS.This issue | Jan 2, 2025 | 5.4 | 17 | NO | NO |
CVE-2024-47364MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in moveaddons Move Addons for Elementor move-addons allows Stored XSS.This issue | Oct 6, 2024 | 5.4 | 17 | NO | NO |
CVE-2024-47396MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in moveaddons Move Addons for Elementor move-addons allows Stored XSS.This issue | Oct 1, 2024 | 5.4 | 17 | NO | NO |
CVE-2024-4695MEDIUM The Move Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.3.1 due to insufficient | May 21, 2024 | 5.4 | 17 | NO | NO |
CVE-2024-34562MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move | May 8, 2024 | 5.4 | 17 | NO | NO |
CVE-2024-10360MEDIUM The Move Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the render function in includes/w | Oct 29, 2024 | 4.3 | 16 | NO | NO |
CVE-2024-2131MEDIUM The Move Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's infobox and button widget in all versions up to, and including, 1.2 | Mar 23, 2024 | 5.4 | 16 | NO | NO |
Signals from CVEs in this vendor scope (9 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Moveaddons.
Media articles that mention a CVE ID that affects a product developed by Moveaddons — matched by CVE ID, not by vendor name.