Hashthemes Easy Elementor Addons vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Hashthemes Easy Elementor Addons: 2 record(s), with affected versions and fixes.
CVE-2026-28164
Critical · 9.6
CWE-352 Aug 20, 2026
WordPress Easy Elementor Addons plugin <= 2.3.7 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in HashThemes Easy Elementor Addons allows Cross Site Request Forgery.
This issue affects Easy Elementor Addons: from n/a through 2.3.7.
CVE-2025-58973
High · 7.5
CWE-98 Sep 22, 2025
WordPress Easy Elementor Addons Plugin <= 2.2.8 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in hashthemes Easy Elementor Addons easy-elementor-addons allows PHP Local File Inclusion.This issue affects Easy Elementor Addons: from n/a through <= 2.2.8.