Element Invader vulnerabilities
We track 4 vulnerabilities in Element Invader products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on July 13, 2026.
Latest Element Invader vulnerabilities
- 7.1 High severity
ElementInvader Addons for Elementor: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows DOM-Based XSS.This issue affects ElementInvader Addons for Elem
- 8.5 High severity
ElementInvader Addons for Elementor: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Blind SQL Injection.This issue affects ElementInvader Addons fo
- 8.8 High severity
ElementInvader Addons for Elementor: Missing Authorization
Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ElementInvader Addons for Elementor: from
- 8.8 High severity
ElementInvader Addons for Elementor: Improper Limitation of a Pathname to a Restricted Directory
Path Traversal: '.../...//' vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows PHP Local File Inclusion.This issue affects ElementInvader Addons for Elementor: from n/a through <= 1.2.6.