# cve.now: Livemesh The newest entries naming Livemesh as an affected vendor (up to 200), of 36 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md. - [CVE-2026-57754](https://cve.now/CVE-2026-57754.md): WordPress Livemesh Addons for WPBakery Page Builder plugin \<= 3.9.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2026-3895](https://cve.now/CVE-2026-3895.md): WPBakery Page Builder Addons by Livemesh \<= 3.9.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting (CVSS 6.4) - [CVE-2026-2030](https://cve.now/CVE-2026-2030.md): WPBakery Page Builder Addons by Livemesh \<= 3.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4) - [CVE-2026-3896](https://cve.now/CVE-2026-3896.md): Livemesh SiteOrigin Widgets \<= 3.9.2 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting (CVSS 6.4) - [CVE-2026-3897](https://cve.now/CVE-2026-3897.md): Livemesh Addons for Beaver Builder \<= 3.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Missing Authorization (CVSS 6.4) - [CVE-2026-1572](https://cve.now/CVE-2026-1572.md): Livemesh Addons by Elementor \<= 9.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via Plugin Settings (CVSS 6.4) - [CVE-2026-1620](https://cve.now/CVE-2026-1620.md): Livemesh Addons by Elementor \<= 9.0 - Authenticated (Contributor+) Local File Inclusion via Widget Template Parameter (CVSS 8.8) - [CVE-2026-39636](https://cve.now/CVE-2026-39636.md): WordPress Livemesh Addons for Elementor plugin \<= 9.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2026-2029](https://cve.now/CVE-2026-2029.md): Livemesh Addons for Beaver Builder \<= 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' and 'value' Shortcode Attributes (CVSS 6.4) - [CVE-2026-24594](https://cve.now/CVE-2026-24594.md): WordPress Livemesh Addons for WPBakery Page Builder plugin \<= 3.9.4 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9) - [CVE-2025-62990](https://cve.now/CVE-2025-62990.md): WordPress Livemesh Addons for Beaver Builder plugin \<= 3.9.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2025-8780](https://cve.now/CVE-2025-8780.md): Livemesh SiteOrigin Widgets \<= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Hero Header and Pricing Table Widgets (CVSS 6.4) - [CVE-2022-4974](https://cve.now/CVE-2022-4974.md): Freemius SDK \<= 2.4.2 - Missing Authorization Checks (CVSS 6.3) - [CVE-2024-8858](https://cve.now/CVE-2024-8858.md): Elementor Addons by Livemesh \<= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via piechart\_settings Parameter (CVSS 6.4) - [CVE-2024-47303](https://cve.now/CVE-2024-47303.md): WordPress Elementor Addons by Livemesh plugin \<= 8.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2024-43320](https://cve.now/CVE-2024-43320.md): WordPress WPBakery Page Builder Addons plugin \<= 3.9 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2024-38784](https://cve.now/CVE-2024-38784.md): WordPress Livemesh Addons for Beaver Builder plugin \<= 3.6.1 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9) - [CVE-2024-37547](https://cve.now/CVE-2024-37547.md): WordPress Elementor Addons by Livemesh plugin \<= 8.4.0 - Local File Inclusion vulnerability (CVSS 6.5) - [CVE-2024-3639](https://cve.now/CVE-2024-3639.md): Elementor Addons by Livemesh \<= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Grid (CVSS 6.4) - [CVE-2024-2926](https://cve.now/CVE-2024-2926.md): Elementor Addons by Livemesh \<= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Various Widgets (CVSS 6.4) - [CVE-2024-3638](https://cve.now/CVE-2024-3638.md): Elementor Addons by Livemesh \<= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Marquee Text Widget, Testimonials Widget, and Testimonial Slider Widgets (CVSS 6.4) - [CVE-2024-2385](https://cve.now/CVE-2024-2385.md): Elementor Addons by Livemesh \<= 8.4 - Authenticated (Contributor+) Limited Local File Inclusion via Widgets (CVSS 8.8) - [CVE-2024-2655](https://cve.now/CVE-2024-2655.md): Elementor Addons by Livemesh \<= 8.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name (CVSS 6.4) - [CVE-2024-2539](https://cve.now/CVE-2024-2539.md): Elementor Addons by Livemesh \<= 8.3.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget \_id attribute (CVSS 6.4) - [CVE-2024-1458](https://cve.now/CVE-2024-1458.md): Elementor Addons by Livemesh \<= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Widget (CVSS 6.4) - [CVE-2024-1461](https://cve.now/CVE-2024-1461.md): Elementor Addons by Livemesh \<= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget (CVSS 6.4) - [CVE-2024-1465](https://cve.now/CVE-2024-1465.md): Elementor Addons by Livemesh \<= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Carousel Widget (CVSS 6.4) - [CVE-2024-1464](https://cve.now/CVE-2024-1464.md): Elementor Addons by Livemesh \<= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Slider Widget (CVSS 6.4) - [CVE-2024-1466](https://cve.now/CVE-2024-1466.md): Elementor Addons by Livemesh \<= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Multislider Widget (CVSS 6.4) - [CVE-2024-30183](https://cve.now/CVE-2024-30183.md): WordPress WPBakery Page Builder Addons by Livemesh plugin \<= 3.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2024-25598](https://cve.now/CVE-2024-25598.md): WordPress Elementor Addons by Livemesh plugin \<= 8.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2024-27986](https://cve.now/CVE-2024-27986.md): WordPress Livemesh Addons for Elementor Plugin \<= 8.3.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5) - [CVE-2024-2079](https://cve.now/CVE-2024-2079.md): WPBakery Page Builder Addons by Livemesh \<= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4) - [CVE-2024-1235](https://cve.now/CVE-2024-1235.md): Elementor Addons by Livemesh \<= 8.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4) - [CVE-2024-0448](https://cve.now/CVE-2024-0448.md): Elementor Addons by Livemesh \<= 8.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4) - [CVE-2023-50370](https://cve.now/CVE-2023-50370.md): WordPress Livemesh Addons for WPBakery Page Builder Plugin \<= 3.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/vendors/livemesh Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.