Stored XSS Vulnerability in Master Addons for Elementor by Liton Arefin
CVE-2024-52387
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 20 February 2026
What is CVE-2024-52387?
A security flaw has been identified in the Master Addons for Elementor plugin developed by Liton Arefin, which allows for Stored Cross-site Scripting (XSS). This vulnerability arises from improper input neutralization during web page generation, enabling attackers to inject malicious scripts that could be executed in users' browsers. Affected versions include everything up to 2.0.9.9.4, making it crucial for site administrators to update to secure versions to mitigate these risks. For more details on this vulnerability, please refer to the Patchstack database.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Master Addons for Elementor <= n/a
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved