# cve.now: Leap13 The newest entries naming Leap13 as an affected vendor (up to 200), of 45 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md. - [CVE-2026-62078](https://cve.now/CVE-2026-62078.md): WordPress Premium Addons for Elementor plugin \<= 4.11.105 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2026-94168](https://cve.now/CVE-2026-94168.md): WordPress Premium Addons for Elementor plugin \<= 4.11.105 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2026-94118](https://cve.now/CVE-2026-94118.md): WordPress Premium Blocks – Gutenberg Blocks for WordPress plugin \<= 2.3.17 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2026-12141](https://cve.now/CVE-2026-12141.md): Premium Addons for Elementor \<= 4.11.84 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'premium\_tooltip\_text' Parameter (CVSS 4.9) - [CVE-2026-4790](https://cve.now/CVE-2026-4790.md): Premium Addons for Elementor \<= 4.11.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom\_svg' Parameter (CVSS 5.4) - [CVE-2025-69300](https://cve.now/CVE-2025-69300.md): WordPress Premium Addons for Elementor plugin \<= 4.11.63 - Settings Change vulnerability (CVSS 5.4) - [CVE-2025-68494](https://cve.now/CVE-2025-68494.md): WordPress Premium Addons for Elementor plugin \<= 4.11.53 - Sensitive Data Exposure vulnerability (CVSS 5.3) - [CVE-2025-14163](https://cve.now/CVE-2025-14163.md): Premium Addons for Elementor \<= 4.11.53 - Cross-Site Request Forgery via 'insert\_inner\_template' (CVSS 4.3) - [CVE-2025-14155](https://cve.now/CVE-2025-14155.md): Premium Addons for Elementor \<= 4.11.53 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'get\_template\_content' (CVSS 5.3) - [CVE-2024-11937](https://cve.now/CVE-2024-11937.md): Premium Addons for Elementor \<= 4.10.69 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4) - [CVE-2025-4774](https://cve.now/CVE-2025-4774.md): Premium Addons for Elementor \<= 4.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget (CVSS 6.4) - [CVE-2025-22671](https://cve.now/CVE-2025-22671.md): WordPress Disable Elementor Editor Translation plugin \<= 1.0.2 - Broken Access Control vulnerability (CVSS 4.3) - [CVE-2024-56245](https://cve.now/CVE-2024-56245.md): WordPress Premium Blocks plugin \<= 2.1.42 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2024-56225](https://cve.now/CVE-2024-56225.md): WordPress Premium Addons for Elementor plugin \<= 4.10.56 - Broken Access Control vulnerability (CVSS 5.4) - [CVE-2024-10266](https://cve.now/CVE-2024-10266.md): Premium Addons for Elementor \<= 4.10.60 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Box Widget (CVSS 6.4) - [CVE-2021-4445](https://cve.now/CVE-2021-4445.md): Premium Addons for Elementor \<= 4.5.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update (CVSS 6.5) - [CVE-2024-47368](https://cve.now/CVE-2024-47368.md): WordPress Premium Blocks plugin \<= 2.1.33 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2024-8681](https://cve.now/CVE-2024-8681.md): Premium Addons for Elementor \<= 4.10.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Media Grid Widget (CVSS 6.4) - [CVE-2024-6824](https://cve.now/CVE-2024-6824.md): Premium Addons for Elementor \<= 4.10.38 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion and Arbitrary Title Update (CVSS 4.3) - [CVE-2024-37519](https://cve.now/CVE-2024-37519.md): WordPress Premium Blocks – Gutenberg Blocks for WordPress plugin \<= 2.1.27 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2024-37922](https://cve.now/CVE-2024-37922.md): WordPress Premium Addons for Elementor plugin \<= 4.10.34 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2024-6495](https://cve.now/CVE-2024-6495.md): Premium Addons for Elementor \<= 4.10.36 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Animated Text Widget (CVSS 6.4) - [CVE-2024-6434](https://cve.now/CVE-2024-6434.md): Premium Addons for Elementor \<= 4.10.35 - Regular Expressions Denial of Service (CVSS 3.1) - [CVE-2024-6340](https://cve.now/CVE-2024-6340.md): Premium Addons for Elementor \<= 4.10.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget (CVSS 6.4) - [CVE-2024-5553](https://cve.now/CVE-2024-5553.md): Premium Addons for Elementor \<= 4.10.33 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting (CVSS 4.4) - [CVE-2024-4379](https://cve.now/CVE-2024-4379.md): Premium Addons for Elementor \<= 4.10.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Global Tooltip (CVSS 5.4) - [CVE-2024-4376](https://cve.now/CVE-2024-4376.md): Premium Addons for Elementor \<= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget (CVSS 6.4) - [CVE-2024-4205](https://cve.now/CVE-2024-4205.md): Premium Addons for Elementor \<= 4.10.31 - Missing Authorization to Information Disclosure (CVSS 4.3) - [CVE-2024-4378](https://cve.now/CVE-2024-4378.md): Premium Addons for Elementor \<= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Menu and Shape Divider (CVSS 6.4) - [CVE-2024-4203](https://cve.now/CVE-2024-4203.md): Premium Addons for Elementor \<= 4.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4) - [CVE-2024-3647](https://cve.now/CVE-2024-3647.md): Premium Addons for Elementor \<= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'arrow\_style' (CVSS 6.4) - [CVE-2024-3885](https://cve.now/CVE-2024-3885.md): Premium Addons for Elementor \<= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4) - [CVE-2024-32791](https://cve.now/CVE-2024-32791.md): WordPress Premium Addons for Elementor plugin \<= 4.10.25 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2024-31278](https://cve.now/CVE-2024-31278.md): WordPress Premium Addons for Elementor plugin \<= 4.10.22 - Sensitive Data Exposure vulnerability (CVSS 4.3) - [CVE-2024-2666](https://cve.now/CVE-2024-2666.md): Premium Addons for Elementor \<= 4.10.24 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting (CVSS 5.4) - [CVE-2024-2664](https://cve.now/CVE-2024-2664.md): Premium Addons for Elementor \<= 4.10.24 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4) - [CVE-2024-2665](https://cve.now/CVE-2024-2665.md): Premium Addons for Elementor \<= 4.10.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button (CVSS 6.4) - [CVE-2024-0376](https://cve.now/CVE-2024-0376.md): Premium Addons for Elementor \<= 4.10.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link Widget (CVSS 6.4) - [CVE-2024-29106](https://cve.now/CVE-2024-29106.md): WordPress Premium Addons for Elementor plugin \<= 4.10.16 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2024-2399](https://cve.now/CVE-2024-2399.md): Premium Addons for Elementor \<= 4.10.23 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4) - [CVE-2024-1680](https://cve.now/CVE-2024-1680.md): Premium Addons for Elementor \<= 4.10.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Banner, Team Members, and Image Scroll Widgets (CVSS 6.4) - [CVE-2024-0326](https://cve.now/CVE-2024-0326.md): Premium Addons for Elementor \<= 4.10.17 - Authenticated(Contributor+) Stored Cross-Site Scripting via Link Wrapper (CVSS 6.4) - [CVE-2024-1242](https://cve.now/CVE-2024-1242.md): Premium Addons for Elementor \<= 4.10.18 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4) - [CVE-2024-24831](https://cve.now/CVE-2024-24831.md): WordPress Premium Addons for Elementor plugin \<= 4.10.16 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2023-37868](https://cve.now/CVE-2023-37868.md): WordPress Premium Addons PRO Plugin \<= 2.9.0 is vulnerable to Sensitive Data Exposure (CVSS 6.5) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/vendors/leap13 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.