CVE-2021-24271

MEDIUM 5.4CVE-2021-24271 · Published 05/05/2021 · updated 17/06/2026

In short

CVE-2021-24271 is a MEDIUM (CVSS 5.4) vulnerability affecting ultimate addons for elementor (brainstormforce).
Chance of exploitation in the next 30 days (EPSS): 0.59%, higher than 48.2% of all vulnerabilities.
Fix: update to 1.30.0 or later.

Package	Affected versions	Patched versions
ultimate addons for elementor brainstormforce	`< 1.30.0`	`1.30.0`

Description

The “Ultimate Addons for Elementor” WordPress Plugin before 1.30.0 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.

References

wpscan.com/vulnerability/1ce8e188-6ded-413e-b4d1-bf80258acf79 · Third Party Advisory
wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem · Third Party Advisory

More vulnerabilities in ultimate addons for elementor

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free