CVE Intelligence

LeapWorx vulnerabilities

🔔 Create alert RSS

Published CVEs affecting LeapWorx products: 4 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-109890 Medium · 5.3 CWE-862 Oct 13, 2026
Missing Authorization vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for...
Missing Authorization vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premium Addons for Elementor: from n/a through 4.11.110.
CVE-2026-108490 Medium · 6.5 CWE-79 Oct 13, 2026
WordPress Premium Addons for Elementor plugin <= 4.11.110 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.11.110.
CVE-2026-108482 Medium · 6.5 CWE-79 Oct 12, 2026
WordPress Premium Addons for Elementor plugin <= 4.11.110 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.11.110.
CVE-2026-103084 Medium · 6.5 CWE-79 Oct 5, 2026
WordPress Premium Addons for Elementor plugin <= 4.11.109 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.11.109.