Leap13

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Leap13 product.

RSS Feeds for Leap13 security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Leap13 products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Leap13 Sorted by Most Security Vulnerabilities since 2018

Leap13 Premium Addons For Elementor37 vulnerabilities

Leap13 Premium Addons33 vulnerabilities

Leap13 Premium Blocks For Gutenberg4 vulnerabilities

Leap13 Premium Blocks For Gutenburg1 vulnerability

By the Year

In 2026 there have been 6 vulnerabilities in Leap13 with an average score of 5.9 out of ten. Last year, in 2025 Leap13 had 6 security vulnerabilities published. If vulnerabilities keep coming in at the current rate, it appears that number of security vulnerabilities in Leap13 in 2026 could surpass last years number. However, the average CVE base score of the vulnerabilities in 2026 is greater by 0.33.

Year	Vulnerabilities	Average Score
2026	6	5.87
2025	6	5.54
2024	38	6.06
2023	2	6.30
2022	0	0.00
2021	1	5.40

It may take a day or so for new Leap13 vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Leap13 Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-62078	Sep 30, 2026	XSS in Premium Addons for Elementor <=4.11.105 Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions.	Premium Addons For Elementor
CVE-2026-94168	Sep 23, 2026	Contributor XSS in Premium Addons for Elementor <=4.11.105 Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions.	Premium Addons For Elementor
CVE-2026-94118	Sep 23, 2026	Contributor XSS in Premium Blocks <=2.3.17 Contributor Cross Site Scripting (XSS) in Premium Blocks Gutenberg Blocks for WordPress <= 2.3.17 versions.	Premium Blocks For Gutenberg
CVE-2026-12141	Jul 11, 2026	Stored XSS in Premium Addons for Elementor 4.11.84 via premium_tooltip_text The Premium Addons for Elementor Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'premium_tooltip_text' parameter in all versions up to, and including, 4.11.84 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected payload is specifically triggered when an administrator or higher-privileged user opens the affected post in the Elementor editor, as the raw unescaped output occurs via the print_template() method registered on the 'elementor/section/print_template' hook rather than on the public-facing frontend.	Premium Addons
CVE-2026-4790	May 02, 2026	Stored XSS in Premium Addons for Elementor 4.11.70 via custom_svg The Premium Addons for Elementor Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_svg' parameter in versions up to, and including, 4.11.70 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.	Premium Addons
CVE-2025-69300	Jan 22, 2026	Missing Auth in Premium Addons for Elementor <=4.11.63 Missing Authorization vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premium Addons for Elementor: from n/a through <= 4.11.63.	Premium Addons For Elementor
CVE-2025-68494	Dec 24, 2025	Leap13 Premium Addons for Elementor <=4.11.53: Sensitive Info Leak (Elementor Premium Addons) Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Premium Addons for Elementor: from n/a through <= 4.11.53.	Premium Addons For Elementor
CVE-2025-14163	Dec 23, 2025	Premium Addons for Elementor 4.11.53 CSRF allows arbitrary template creation The Premium Addons for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.11.53. This is due to missing nonce validation in the 'insert_inner_template' function. This makes it possible for unauthenticated attackers to create arbitrary Elementor templates via a forged request granted they can trick a site administrator or other user with the edit_posts capability into performing an action such as clicking on a link.	Premium Addons
CVE-2025-14155	Dec 23, 2025	Premium Addons for Elementor <4.11.53 Unauth Data Access via get_template_content The Premium Addons for Elementor Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_template_content' function in all versions up to, and including, 4.11.53. This makes it possible for unauthenticated attackers to view the content of private, draft, and pending templates.	Premium Addons
CVE-2024-11937	Jul 04, 2025	Premium Addons Elementor v4.10.69: Stored XSS via Mobile Menu linkURL The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's linkURL in the Mobile Menu element in all versions up to, and including, 4.10.69 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.	Premium Addons For Elementor Premium Addons