Plugin security history

Livemesh Addons by Elementor Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 24 vulnerability records associated with Livemesh Addons by Elementor, published between 2019 and 2026.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

24Total records

0Critical

3High

21Medium

0Low

0Informational

21Patched records

3Currently marked unpatched

2019-02-25First disclosure

2026-04-15Latest disclosure

23 of 24CVE coverage

Year-by-Year Timeline

Year	Records	Relative volume
2019	1	1 records
2021	1	1 records
2022	2	2 records
2023	1	1 records
2024	16	16 records
2026	3	3 records

Severity Breakdown

Severity	Records	Share
High	3	12.5%
Medium	21	87.5%

Vulnerability-Type Breakdown

Cross-Site Scripting

20 records83.3%

First: 2021. Latest: 2026.

Missing Authorization

2 records8.3%

First: 2019. Latest: 2022.

Path Traversal

1 record4.2%

First: 2024. Latest: 2024.

Other

1 record4.2%

First: 2026. Latest: 2026.

Patch Status

Patched: 21
Currently marked unpatched: 3
Unknown status: 0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

8.5.1
8.4.1
8.4.2
8.4
8.3.7
8.3.6
8.3.1
8.3.3
8.3.2
7.9.1
7.2.4
7.1.4
6.8
2.6

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected range	Vulnerability	Published	Patched version	Severity
`*-9.0`	Livemesh Addons by Elementor <= 9.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via Plugin Settings	April 15, 2026	Not supplied	Medium
`*-9.0`	Livemesh Addons by Elementor <= 9.0 - Authenticated (Contributor+) Local File Inclusion via Widget Template Parameter	April 15, 2026	Not supplied	High
`*-9.0`	Livemesh Addons for Elementor <= 9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting	February 13, 2026	Not supplied	Medium
`*-8.5`	Livemesh Addons for Elementor <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting	September 25, 2024	8.5.1	Medium
`*-8.5`	Elementor Addons by Livemesh <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via piechart_settings Parameter	September 24, 2024	8.5.1	Medium
`*-8.4`	Elementor Addons by Livemesh <= 8.4 - Authenticated (Contributor+) Limited Local File Inclusion via Widgets	July 3, 2024	8.4.1	High
`*-8.4.1`	Elementor Addons by Livemesh <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Marquee Text Widget, Testimonials Widget, and Testimonial Slider Widgets	July 3, 2024	8.4.2	Medium
`*-8.3.7`	Elementor Addons by Livemesh <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Various Widgets	July 3, 2024	8.4	Medium
`*-8.3.7`	Elementor Addons by Livemesh <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Grid	July 3, 2024	8.4	Medium
`*-8.3.6`	Elementor Addons by Livemesh <= 8.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name	April 9, 2024	8.3.7	Medium
`*-8.3.6`	Elementor Addons by Livemesh <= 8.3.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget _id attribute	April 9, 2024	8.3.7	Medium
`*-8.3.4`	Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Widget	March 13, 2024	8.3.6	Medium
`*-8.3.4`	Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget	March 13, 2024	8.3.6	Medium
`*-8.3.4`	Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Carousel Widget	March 13, 2024	8.3.6	Medium
`*-8.3.4`	Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Slider Widget	March 13, 2024	8.3.6	Medium
`*-8.3.4`	Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Multislider Widget	March 13, 2024	8.3.6	Medium
`*-8.3`	Livemesh Addons for Elementor <= 8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via animated_text_class	February 12, 2024	8.3.1	Medium
`*-8.3.2`	Elementor Addons by Livemesh <= 8.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting	February 7, 2024	8.3.3	Medium
`*-8.3.1`	Elementor Addons by Livemesh <= 8.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting	January 25, 2024	8.3.2	Medium
`2.0.1-7.7.1`	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get	July 18, 2023	7.9.1	Medium
`*-7.2.3`	Livemesh Addons for Elementor <= 7.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting	November 21, 2022	7.2.4	Medium
`[*, 7.1.4)`	Freemius SDK <= 2.4.2 - Missing Authorization Checks	March 4, 2022	7.1.4	Medium
`*-6.7.1`	Livemesh Addons for Elementor <= 6.7.1- Contributor+ Stored Cross-Site Scripting	April 13, 2021	6.8	Medium
`[*, 2.6)`	Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update	February 25, 2019	2.6	High

Selected source records

Latest Records

MediumCVE-2026-1572

Livemesh Addons by Elementor <= 9.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via Plugin Settings

Published: April 15, 2026

Affected versions: *-9.0
Patched versions: Not supplied

Original Wordfence record

HighCVE-2026-1620

Livemesh Addons by Elementor <= 9.0 - Authenticated (Contributor+) Local File Inclusion via Widget Template Parameter

Published: April 15, 2026

Affected versions: *-9.0
Patched versions: Not supplied

Original Wordfence record

MediumCVE-2026-39636

Livemesh Addons for Elementor <= 9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: February 13, 2026

Affected versions: *-9.0
Patched versions: Not supplied

Original Wordfence record

MediumCVE-2024-47303

Livemesh Addons for Elementor <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: September 25, 2024

Affected versions: *-8.5
Patched versions: 8.5.1

Original Wordfence record

MediumCVE-2024-8858

Elementor Addons by Livemesh <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via piechart_settings Parameter

Published: September 24, 2024

Affected versions: *-8.5
Patched versions: 8.5.1

Original Wordfence record

HighCVE-2024-2385

Elementor Addons by Livemesh <= 8.4 - Authenticated (Contributor+) Limited Local File Inclusion via Widgets

Published: July 3, 2024

Affected versions: *-8.4
Patched versions: 8.4.1

Original Wordfence record

MediumCVE-2024-3638

Elementor Addons by Livemesh <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Marquee Text Widget, Testimonials Widget, and Testimonial Slider Widgets

Published: July 3, 2024

Affected versions: *-8.4.1
Patched versions: 8.4.2

Original Wordfence record

MediumCVE-2024-2926

Elementor Addons by Livemesh <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Various Widgets

Published: July 3, 2024

Affected versions: *-8.3.7
Patched versions: 8.4

Original Wordfence record

Highest-Severity Records

HighCVE-2024-2385

Elementor Addons by Livemesh <= 8.4 - Authenticated (Contributor+) Limited Local File Inclusion via Widgets

Published: July 3, 2024

Affected versions: *-8.4
Patched versions: 8.4.1

Original Wordfence record

HighCVE-2026-1620

Livemesh Addons by Elementor <= 9.0 - Authenticated (Contributor+) Local File Inclusion via Widget Template Parameter

Published: April 15, 2026

Affected versions: *-9.0
Patched versions: Not supplied

Original Wordfence record

High

Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update

Published: February 25, 2019

Affected versions: [*, 1.9.3)
Patched versions: 1.9.3

Affected versions: *-1.0.1
Patched versions: Not supplied

Affected versions: *-0.1.9
Patched versions: Not supplied

Affected versions: *
Patched versions: Not supplied

Affected versions: *-1.0
Patched versions: Not supplied

Affected versions: *-1.0.0
Patched versions: Not supplied

Affected versions: [*, 1.1.4)
Patched versions: 1.1.4

Affected versions: *-1.0
Patched versions: Not supplied

Affected versions: *-1.0.1
Patched versions: Not supplied

Affected versions: [*, 1.6.5)
Patched versions: 1.6.5

Affected versions: *-1.0.3
Patched versions: Not supplied

Affected versions: *-0.3
Patched versions: Not supplied

Affected versions: *-1.0.1
Patched versions: Not supplied

Affected versions: *-1.0.0
Patched versions: Not supplied

Affected versions: *-1.2.3
Patched versions: Not supplied

Affected versions: *-1.3.2
Patched versions: Not supplied

Affected versions: *-1.0.17
Patched versions: Not supplied

Affected versions: [*, 1.8.3)
Patched versions: 1.8.3

Affected versions: [*, 2.6)
Patched versions: 2.6

Affected versions: *-2.1
Patched versions: Not supplied

Affected versions: [*, 1.2.9)
Patched versions: 1.2.9

Affected versions: [*, 1.2.6)
Patched versions: 1.2.6

Affected versions: *-1.1.7
Patched versions: Not supplied

Affected versions: [*, 2.18.0)
Patched versions: 2.18.0

Affected versions: [*, 1.3.1)
Patched versions: 1.3.1

Affected versions: *-1.1.6
Patched versions: Not supplied

Affected versions: *-1.2.2
Patched versions: Not supplied

Affected versions: *-1.0.0
Patched versions: Not supplied

Affected versions: [*, 2.3.2)
Patched versions: 2.3.2

Affected versions: *-3.1
Patched versions: Not supplied

Affected versions: [*, 1.1.3)
Patched versions: 1.1.3

Affected versions: [*, 2.0.1)
Patched versions: 2.0.1

Affected versions: [*, 1.6.3)
Patched versions: 1.6.3

Affected versions: *-0.4.0
Patched versions: Not supplied

Affected versions: *-1.2.2
Patched versions: Not supplied

Affected versions: *-1.0.4
Patched versions: Not supplied

Affected versions: *-1.1.0
Patched versions: Not supplied

Affected versions: [*, 0.7.3)
Patched versions: 0.7.3

Affected versions: *-1.0
Patched versions: Not supplied

Affected versions: *-1.2.2
Patched versions: Not supplied

Affected versions: *-1.2.0
Patched versions: Not supplied

Affected versions: [*, 1.4.0)
Patched versions: 1.4.0

Affected versions: *-1.1.1
Patched versions: Not supplied

Affected versions: [*, 1.6.17)
Patched versions: 1.6.17

Affected versions: [*, 1.3.20)
Patched versions: 1.3.20

Affected versions: [*, 3.0.4)
Patched versions: 3.0.4

Affected versions: *-1.1.2
Patched versions: Not supplied

Affected versions: *-1.0.0
Patched versions: Not supplied

Affected versions: *-1.1
Patched versions: Not supplied

Affected versions: [*, 1.0.2)
Patched versions: 1.0.2

Affected versions: *-1.0.0
Patched versions: Not supplied

Affected versions: *-1.0.6
Patched versions: Not supplied

Affected versions: *-1.1.2
Patched versions: Not supplied

Affected versions: *-2.1
Patched versions: Not supplied

Affected versions: *-1.0
Patched versions: Not supplied

Affected versions: *-1.9.4
Patched versions: Not supplied

Affected versions: [*, 1.2.3)
Patched versions: 1.2.3

Affected versions: *-2.0.0
Patched versions: Not supplied

Affected versions: *-1.7.2
Patched versions: Not supplied

Affected versions: *-1.0.1
Patched versions: Not supplied

Affected versions: *-1.5.5
Patched versions: Not supplied

Affected versions: *-1.0
Patched versions: Not supplied

Affected versions: *-0.0.19
Patched versions: Not supplied

Affected versions: *-1.0.2
Patched versions: Not supplied

Affected versions: *-1.0.5
Patched versions: Not supplied

Affected versions: [*, 3.8.1)
Patched versions: 3.8.1

Affected versions: *-1.0.7
Patched versions: Not supplied

Affected versions: *-1.0.3
Patched versions: Not supplied

Affected versions: *-1.0.2
Patched versions: Not supplied

Affected versions: [*, 3.2.6.1)
Patched versions: 3.2.6.1

Affected versions: *-1.0.41
Patched versions: Not supplied

Affected versions: [*, 2.1.9.8)
Patched versions: 2.1.9.8

Affected versions: *-1.5.9.4
Patched versions: Not supplied

Affected versions: [*, 4.2997)
Patched versions: 4.2997

Affected versions: *-1.1.0
Patched versions: Not supplied

Affected versions: [*, 3.3.1.2)
Patched versions: 3.3.1.2

Affected versions: *-5.0
Patched versions: Not supplied

Affected versions: [*, 1.4.3)
Patched versions: 1.4.3

Affected versions: *-2.0
Patched versions: Not supplied

Affected versions: *-2.0.0
Patched versions: Not supplied

Affected versions: *-1.9.1
Patched versions: Not supplied

Affected versions: [*, 1.1)
Patched versions: 1.1

Affected versions: *-3.1
Patched versions: 3.2

Affected versions: *-2.4.7
Patched versions: Not supplied

Affected versions: *-1.1
Patched versions: Not supplied

Affected versions: *-1.0.5
Patched versions: Not supplied

Affected versions: [*, 2.7.3)
Patched versions: 2.7.3

Affected versions: *-1.1
Patched versions: Not supplied

Affected versions: *-201704251008
Patched versions: Not supplied

Affected versions: *-1.0.0
Patched versions: Not supplied

Affected versions: *-1.0.0
Patched versions: Not supplied

Affected versions: *-2.0
Patched versions: Not supplied

Affected versions: [*, 1.7.2)
Patched versions: 1.7.2

Affected versions: [*, 3.0.2)
Patched versions: 3.0.2

Affected versions: *-1.0.3
Patched versions: Not supplied

Affected versions: *-1.1.1
Patched versions: Not supplied

Affected versions: [*, 4.1.9.5)
Patched versions: 4.1.9.5

Affected versions: [*, 3.0.6)
Patched versions: 3.0.6

Affected versions: [*, 0.7.2)
Patched versions: 0.7.2

Affected versions: [*, 2.5.2)
Patched versions: 2.5.2

Affected versions: *-1.5.2
Patched versions: Not supplied

Affected versions: [*, 4.0.5)
Patched versions: 4.0.5

Affected versions: [*, 3.3.57)
Patched versions: 3.3.57

Affected versions: [*, 2.6.4)
Patched versions: 2.6.4

Affected versions: [*, 3.0.9)
Patched versions: 3.0.9

Affected versions: *-201703020805
Patched versions: Not supplied

Affected versions: *-1.0.0
Patched versions: Not supplied

Affected versions: *-1.2.2
Patched versions: Not supplied

Affected versions: *-1.0.2
Patched versions: Not supplied

Affected versions: *-1.0
Patched versions: Not supplied

Affected versions: *-1.0.0
Patched versions: Not supplied

Affected versions: *-0.0.17
Patched versions: Not supplied

Affected versions: *-1.0.1
Patched versions: Not supplied

Affected versions: *-1.0.4
Patched versions: Not supplied

Affected versions: *-1.4.0
Patched versions: Not supplied

Affected versions: *-1.1
Patched versions: Not supplied

Affected versions: *-2.0
Patched versions: Not supplied

Affected versions: *-1.1
Patched versions: Not supplied

Affected versions: *-1.0.0
Patched versions: Not supplied

Affected versions: [*, 3.3.0)
Patched versions: 3.3.0

Affected versions: [*, 2.2.3.1)
Patched versions: 2.2.3.1

Affected versions: *-1.1
Patched versions: Not supplied

Affected versions: *-1.0
Patched versions: Not supplied

Affected versions: *-1.0.9.21
Patched versions: 1.0.9.22

Affected versions: *-1.0.2
Patched versions: Not supplied

Affected versions: [*, 1.0.4)
Patched versions: 1.0.4

Affected versions: [*, 0.1.1)
Patched versions: 0.1.1

Affected versions: [*, 1.1.4)
Patched versions: 1.1.4

Affected versions: [*, 3.1.7)
Patched versions: 3.1.7

Affected versions: *-1.6.1
Patched versions: Not supplied

Affected versions: [*, 1.0.1)
Patched versions: 1.0.1

Affected versions: [*, 3.2)
Patched versions: 3.2

Affected versions: [*, 0.7.1)
Patched versions: 0.7.1

Affected versions: *-1.0.1
Patched versions: Not supplied

Original Wordfence record

MediumCVE-2024-47303

Livemesh Addons for Elementor <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: September 25, 2024

Affected versions: *-8.5
Patched versions: 8.5.1

Original Wordfence record

MediumCVE-2024-0448

Elementor Addons by Livemesh <= 8.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: January 25, 2024

Affected versions: *-8.3.1
Patched versions: 8.3.2

Original Wordfence record

MediumCVE-2026-1572

Livemesh Addons by Elementor <= 9.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via Plugin Settings

Published: April 15, 2026

Affected versions: *-9.0
Patched versions: Not supplied

Original Wordfence record

MediumCVE-2024-25598

Livemesh Addons for Elementor <= 8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via animated_text_class

Published: February 12, 2024

Affected versions: *-8.3
Patched versions: 8.3.1

Original Wordfence record

MediumCVE-2024-2539

Elementor Addons by Livemesh <= 8.3.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget _id attribute

Published: April 9, 2024

Affected versions: *-8.3.6
Patched versions: 8.3.7

Original Wordfence record

Currently Marked Unpatched Records

MediumCVE-2026-1572

Livemesh Addons by Elementor <= 9.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via Plugin Settings

Published: April 15, 2026

Affected versions: *-9.0
Patched versions: Not supplied

Original Wordfence record

HighCVE-2026-1620

Livemesh Addons by Elementor <= 9.0 - Authenticated (Contributor+) Local File Inclusion via Widget Template Parameter

Published: April 15, 2026

Affected versions: *-9.0
Patched versions: Not supplied

Original Wordfence record

MediumCVE-2026-39636

Livemesh Addons for Elementor <= 9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: February 13, 2026

Affected versions: *-9.0
Patched versions: Not supplied

Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

WordPress Malware Removal WordPress Security Maintenance Contact 3Zero Digital

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory