Is Consulting Elementor Widgets safe?

Every recorded flaw

• Oct 31, 2025Consulting Elementor Widgets: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2025-64361 · affects up to 1.4.2 · reported by PatchstackMedium 6.5
• Oct 31, 2025Consulting Elementor Widgets: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')CVE-2025-64360 · affects up to 1.4.2 · reported by PatchstackHigh 7.5
• Jul 9, 2024Masterstudy Elementor Widgets: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2024-37090 · affects up to 1.2.2 · reported by PatchstackHigh 8.5
• Jun 24, 2024Consulting Elementor Widgets: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CVE-2024-37092 · affects up to 1.3.0 · reported by PatchstackHigh 8.5
• Jun 24, 2024Consulting Elementor Widgets: Improper Neutralization of Special Elements used in a Command ('Command Injection')CVE-2024-37091 · affects up to 1.3.0 · reported by Patchstack1.2% oddsCritical 9.9
• Jun 24, 2024Consulting Elementor Widgets: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CVE-2024-37089 · affects up to 1.3.0 · reported by PatchstackCritical 9

Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.