Plugin icon

Ultimate Post Kit – Elementor Post Grid, Post Carousel, Post Slider & Blog Layout Widgets

ultimate-post-kit

Vulnerabilities:

7

Last Updated:

October 15, 2026

Active Installs:

30000

Published
Title
Fixed in
CVSS
Published
2026-10-08
Title
Ultimate Post Kit – Elementor Post Grid, Post Carousel, Post Slider & Blog Layout Widgets < 4.5.6 - Missing Authorization
Fixed in
Fixed in 4.5.6
CVSS
4.3 (medium)
Published
2026-08-08
Title
BdThemes Multiple Plugins - XSS via 'display_id' from Sigmative API
Fixed in
Fixed in 4.2.1
CVSS
5.4 (medium)
Published
2026-03-18
Title
Ultimate Post Kit Addons for Elementor < 4.0.22 - Missing Authorization
Fixed in
Fixed in 4.0.22
CVSS
4.3 (medium)
Published
2025-12-10
Title
Ultimate Post Kit < 4.0.16 – Unauthenticated Arbitrary Post Content Disclosure
Fixed in
Fixed in 4.0.16
CVSS
5.3 (medium)
Published
2024-06-27
Title
Ultimate Post Kit Addons For Elementor – (Post Grid, Post Carousel, Post Slider, Category List, Post Tabs, Timeline, Post Ticker, Tag Cloud) < 3.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Count (Static) Widget
Fixed in
Fixed in 3.11.8
CVSS
6.4 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.6.4
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 2.9.1
CVSS
4.3 (medium)