Plugin icon

Powerkit – Supercharge your WordPress Site

powerkit

Vulnerabilities:

6

Last Updated:

July 31, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-08-05
Title
Powerkit – Supercharge your WordPress Site < 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.1.1
CVSS
5.5 (medium)
Published
2026-07-31
Title
Powerkit < 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute
Fixed in
Fixed in 3.1.1
CVSS
5.5 (medium)
Published
2026-07-31
Title
Powerkit < 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Fixed in
Fixed in 3.1.1
CVSS
5.5 (medium)
Published
2026-07-31
Title
Powerkit < 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'nav' Shortcode Attribute
Fixed in
Fixed in 3.1.1
CVSS
5.5 (medium)
Published
2024-04-05
Title
Powerkit – Supercharge your WordPress Site < 2.9.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 2.9.2
CVSS
6.4 (medium)
Published
2022-02-16
Title
Powerkit < 2.5.9 - Post Views Settings Update/Reset via CSRF
Fixed in
Fixed in 2.5.9
CVSS
5.4 (medium)