CVE-2024-4448 Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Dual Color Header', 'Event Calendar', & 'Advanced Data Table'

🗓️ 10 May 2024 07:33:37Reported by WordfenceType

Stored Cross-Site Scripting in Essential Addons for Elementor Plugin

Reporter	Title	Published	Views	Family All 11
CNNVD	WordPress plugin Essential Addons for Elementor 安全漏洞	14 May 202400:00	–	cnnvd
CVE	CVE-2024-4448	10 May 202407:33	–	cve
EUVD	EUVD-2024-44067	3 Oct 202520:07	–	euvd
NVD	CVE-2024-4448	14 May 202415:43	–	nvd
OpenVAS	WordPress Essential Addons for Elementor Plugin < 5.9.20 Multiple XSS Vulnerabilities	2 Aug 202400:00	–	openvas
OSV	CVE-2024-4448	14 May 202415:43	–	osv
Patchstack	WordPress Essential Addons for Elementor plugin <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Dual Color Header', 'Event Calendar', & 'Advanced Data Table' vulnerability	2 Feb 202608:59	–	patchstack
RedhatCVE	CVE-2024-4448	23 May 202507:36	–	redhatcve
Vulnrichment	CVE-2024-4448 Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Dual Color Header', 'Event Calendar', & 'Advanced Data Table'	10 May 202407:33	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (May 6, 2024 to May 12, 2024)	16 May 202413:04	–	wordfence

[
  {
    "vendor": "wpdevteam",
    "product": "Essential Addons for Elementor – Popular Elementor Templates & Widgets",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "5.9.19",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3083162/essential-addons-for-elementor-lite/tags/5.9.20/includes/Elements/Dual_Color_Header.php
plugins	www.plugins.trac.wordpress.org/changeset/3083162/essential-addons-for-elementor-lite/tags/5.9.20/includes/Elements/Advanced_Data_Table.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/21e12c72-7898-4896-9852-ebb10e5f9a3b
plugins	www.plugins.trac.wordpress.org/changeset/3083162/essential-addons-for-elementor-lite/tags/5.9.20/includes/Elements/Event_Calendar.php

08 Apr 2026 16:41Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.4

EPSS0.00508

CWE-79