CVE-2021-24351: Posimyth The Plus Addons For Elementor

Medium severity, CVSS 6.1. EPSS: 2.5% chance of exploitation in the next 30 days.

The theplus_more_post AJAX action of The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.12 did not properly sanitise some of its fields, leading to a reflected Cross-Site Scripting (exploitable on both unauthenticated and authenticated users)

Affected products

• Posimyth The Plus Addons For Elementor: before 4.1.12 (fixed in 4.1.12)

Published 2021-06-14. Last modified 2026-06-17.