WordPress Elementor Addon Elements plugin <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widget vulnerability

🗓️ 02 Feb 2026 19:41:00Reported by wesley (wcraft)Type

Authenticated stored cross site scripting in WordPress Elementor Addon Elements <=1.13.3 via Twitter Widget.

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress plugin Elementor Addon Elements Cross-Site Scripting Vulnerability	12 Jun 202400:00	–	cnnvd
CVE	CVE-2024-2092	12 Jun 202409:33	–	cve
Cvelist	CVE-2024-2092 Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widget	12 Jun 202409:33	–	cvelist
EUVD	EUVD-2024-27056	3 Oct 202520:07	–	euvd
NVD	CVE-2024-2092	12 Jun 202410:15	–	nvd
Positive Technologies	PT-2024-18817 · WordPress · Elementor Addon Elements	12 Jun 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-2092	7 Jan 202609:14	–	redhatcve
Vulnrichment	CVE-2024-2092 Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widget	12 Jun 202409:33	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 10, 2024 to June 16, 2024)	20 Jun 202413:40	–	wordfence
WPVulnDB	Elementor Addon Elements < 1.13.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widget	11 Jun 202400:00	–	wpvulndb

Vulners

Node

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/addon-elements-for-elementor-page-builder/elementor-addon-elements-1133-authenticated-contributor-stored-cross-site-scripting-via-twitter-widget

02 Feb 2026 19:41Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.15.4

EPSS0.00323

SSVC