Cross-Site Scripting
8 records80%First: 2024. Latest: 2025.
Plugin security history
Piotnet Addons For Elementor Vulnerability History & Security Timeline
The Wordfence Intelligence dataset currently contains 10 vulnerability records associated with Piotnet Addons For Elementor, published between 2024 and 2025.
Dataset last synchronized: 2026-08-03 00:31:25 UTC
At a glance
Security Snapshot
10Total records
0Critical
0High
10Medium
0Low
0Informational
8Patched records
2Currently marked unpatched
2024-03-25First disclosure
2025-04-17Latest disclosure
10 of 10CVE coverage
Year-by-Year Timeline
| Year | Records | Relative volume |
|---|---|---|
| 2024 | 6 | |
| 2025 | 4 |
Severity Breakdown
| Severity | Records | Share |
|---|---|---|
| Medium | 10 | 100% |
Vulnerability-Type Breakdown
Information Disclosure
1 record10%First: 2024. Latest: 2024.
Missing Authorization
1 record10%First: 2025. Latest: 2025.
Patch Status
- Patched
- 8
- Currently marked unpatched
- 2
- Unknown status
- 0
Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.
Latest Known Patched Versions
2.4.332.4.322.4.312.4.302.4.292.4.282.4.26
Affected-Version History
Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.
| Affected range | Vulnerability | Published | Patched version | Severity |
|---|---|---|---|---|
*-2.4.36 | Piotnet Addons For Elementor <= 2.4.36 - Authenticated (Contributor+) Stored Cross-Site Scripting | April 17, 2025 | Not supplied | Medium |
*-2.4.36 | Piotnet Addons For Elementor <= 2.4.36 - Authenticated (Contributor+) Stored Cross-Site Scripting | April 4, 2025 | Not supplied | Medium |
*-2.4.32 | Piotnet Addons For Elementor <= 2.4.32 - Authenticated (Contributor+) Post Disclosure | January 14, 2025 | 2.4.33 | Medium |
*-2.4.31 | Piotnet Addons For Elementor <= 2.4.31 - Authenticated (Contributor+) Stored Cross-Site Scripting | January 3, 2025 | 2.4.32 | Medium |
*-2.4.30 | Piotnet Addons For Elementor <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets | August 22, 2024 | 2.4.31 | Medium |
*-2.4.29 | Piotnet Addons For Elementor <= 2.4.29 - Unauthenticated Sensitive Information Exposure | July 26, 2024 | 2.4.30 | Medium |
*-2.4.28 | Piotnet Addons For Elementor <= 2.4.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widget Attributes | May 21, 2024 | 2.4.29 | Medium |
*-2.4.26 | Piotnet Addons For Elementor <= 2.4.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets | May 17, 2024 | 2.4.28 | Medium |
*-2.4.27 | Piotnet Addons For Elementor <= 2.4.27 - Authenticated (Contributor+) Stored Cross-Site Scripting | April 25, 2024 | 2.4.28 | Medium |
*-2.4.25 | Piotnet Addons For Elementor <= 2.4.25 - Authenticated (Contributor+) Stored Cross-Site Scripting | March 25, 2024 | 2.4.26 | Medium |
Selected source records
Latest Records
MediumCVE-2024-13650
Piotnet Addons For Elementor <= 2.4.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: April 17, 2025
- Affected versions
- *-2.4.36
- Patched versions
- Not supplied
MediumCVE-2025-32197
Piotnet Addons For Elementor <= 2.4.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: April 4, 2025
- Affected versions
- *-2.4.36
- Patched versions
- Not supplied
MediumCVE-2024-10775
Piotnet Addons For Elementor <= 2.4.32 - Authenticated (Contributor+) Post Disclosure
Published: January 14, 2025
- Affected versions
- *-2.4.32
- Patched versions
- 2.4.33
MediumCVE-2025-22333
Piotnet Addons For Elementor <= 2.4.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: January 3, 2025
- Affected versions
- *-2.4.31
- Patched versions
- 2.4.32
MediumCVE-2024-5502
Piotnet Addons For Elementor <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Published: August 22, 2024
- Affected versions
- *-2.4.30
- Patched versions
- 2.4.31
MediumCVE-2024-5614
Piotnet Addons For Elementor <= 2.4.29 - Unauthenticated Sensitive Information Exposure
Published: July 26, 2024
- Affected versions
- *-2.4.29
- Patched versions
- 2.4.30
MediumCVE-2024-4262
Piotnet Addons For Elementor <= 2.4.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widget Attributes
Published: May 21, 2024
- Affected versions
- *-2.4.28
- Patched versions
- 2.4.29
MediumCVE-2024-4432
Piotnet Addons For Elementor <= 2.4.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Published: May 17, 2024
- Affected versions
- *-2.4.26
- Patched versions
- 2.4.28
Highest-Severity Records
MediumCVE-2024-13650
Piotnet Addons For Elementor <= 2.4.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: April 17, 2025
- Affected versions
- *-2.4.36
- Patched versions
- Not supplied
MediumCVE-2024-4432
Piotnet Addons For Elementor <= 2.4.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Published: May 17, 2024
- Affected versions
- *-2.4.26
- Patched versions
- 2.4.28
MediumCVE-2024-33630
Piotnet Addons For Elementor <= 2.4.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: April 25, 2024
- Affected versions
- *-2.4.27
- Patched versions
- 2.4.28
MediumCVE-2024-4262
Piotnet Addons For Elementor <= 2.4.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widget Attributes
Published: May 21, 2024
- Affected versions
- *-2.4.28
- Patched versions
- 2.4.29
MediumCVE-2024-5502
Piotnet Addons For Elementor <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Published: August 22, 2024
- Affected versions
- *-2.4.30
- Patched versions
- 2.4.31
MediumCVE-2024-29934
Piotnet Addons For Elementor <= 2.4.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: March 25, 2024
- Affected versions
- *-2.4.25
- Patched versions
- 2.4.26
MediumCVE-2025-22333
Piotnet Addons For Elementor <= 2.4.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: January 3, 2025
- Affected versions
- *-2.4.31
- Patched versions
- 2.4.32
MediumCVE-2025-32197
Piotnet Addons For Elementor <= 2.4.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: April 4, 2025
- Affected versions
- *-2.4.36
- Patched versions
- Not supplied
Currently Marked Unpatched Records
MediumCVE-2024-13650
Piotnet Addons For Elementor <= 2.4.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: April 17, 2025
- Affected versions
- *-2.4.36
- Patched versions
- Not supplied
MediumCVE-2025-32197
Piotnet Addons For Elementor <= 2.4.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: April 4, 2025
- Affected versions
- *-2.4.36
- Patched versions
- Not supplied
Need help reviewing an exposed WordPress website?
Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.
Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.
Data Source, Attribution and Methodology
This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.