CVE-2021-24358: Posimyth The Plus Addons For Elementor

Medium severity, CVSS 6.1. EPSS: 2.3% chance of exploitation in the next 30 days.

The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.10 did not validate a redirect parameter on a specifically crafted URL before redirecting the user to it, leading to an Open Redirect issue.

Affected products

• Posimyth The Plus Addons For Elementor: before 4.1.10 (fixed in 4.1.10)

Published 2021-06-14. Last modified 2026-06-17.