Plugin icon

DethemeKit for Elementor

dethemekit-for-elementor

Vulnerabilities:

13

Last Updated:

March 13, 2025

Active Installs:

40000

Published
Title
Fixed in
CVSS
Published
2025-09-22
Title
DethemeKit For Elementor <= 2.1.10 - Missing Authorization
Fixed in
No known fix
CVSS
5.4 (medium)
Published
2025-04-04
Title
DethemeKit For Elementor <= 2.1.10 - Missing Authorization
Fixed in
No known fix
CVSS
5.3 (medium)
Published
2025-03-13
Title
DethemeKit for Elementor < 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.1.10
CVSS
6.4 (medium)
Published
2025-02-14
Title
DethemeKit For Elementor < 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.1.9
CVSS
6.4 (medium)
Published
2025-02-12
Title
DethemeKit For Elementor < 2.1.9 - Authenticated (Contributor+) Protected Post Disclosure
Fixed in
Fixed in 2.1.9
CVSS
4.3 (medium)
Published
2025-02-12
Title
DethemeKit For Elementor < 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via De Gallery Widget
Fixed in
Fixed in 2.1.9
CVSS
6.4 (medium)
Published
2024-09-30
Title
DethemeKit For Elementor < 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.1.8
CVSS
6.4 (medium)
Published
2024-06-26
Title
DethemeKit For Elementor < 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via URL Parameter of the De Gallery Widget
Fixed in
Fixed in 2.1.6
CVSS
5.4 (medium)
Published
2024-05-30
Title
DethemeKit For Elementor < 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via slitems Attribute
Fixed in
Fixed in 2.1.5
CVSS
6.4 (medium)
Published
2024-05-17
Title
DethemeKit For Elementor < 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Fixed in
Fixed in 2.1.4
CVSS
6.4 (medium)
Published
2024-05-14
Title
DethemeKit For Elementor < 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.1.3
CVSS
6.4 (medium)
Published
2024-04-15
Title
DethemeKit For Elementor < 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.1.0
CVSS
6.4 (medium)
Published
2021-04-13
Title
DethemeKit For Elementor < 1.5.5.5 - Contributor+ Stored XSS
Fixed in
Fixed in 1.5.5.5
CVSS
6.8 (medium)