p PatchFirst

CVE-2026-114177

CVE-2026-114177 · WordPress Xpro Elementor Addons plugin <= 1.7.10 - Cross Site Request Forgery (CSRF) vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Cross-Site Request Forgery (CSRF) vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Cross Site Request Forgery.This issue affects Xpro Elementor Addons: from n/a through 1.7.10.

CVSS 8.8 · High · EPSS 0.1% · Fix available

Published
Updated

Affected products and versions

  • xpro elementor addons

    Versions
    • ≥ 0, ≤ 1.7.10: Affected; ≥ 1.7.11: Not affected (custom)

    Update to 1.7.11

Original sources

Check your server →