Plugin icon

Ultimate Post Kit Addons for Elementor

ultimate-post-kit

Vulnerabilities:

5

Last Updated:

May 12, 2026

Active Installs:

30000

Published
Title
Fixed in
CVSS
Published
2026-03-18
Title
Ultimate Post Kit Addons for Elementor < 4.0.22 - Missing Authorization
Fixed in
Fixed in 4.0.22
CVSS
4.3 (medium)
Published
2025-12-10
Title
Ultimate Post Kit < 4.0.16 – Unauthenticated Arbitrary Post Content Disclosure
Fixed in
Fixed in 4.0.16
CVSS
5.3 (medium)
Published
2024-06-27
Title
Ultimate Post Kit Addons For Elementor – (Post Grid, Post Carousel, Post Slider, Category List, Post Tabs, Timeline, Post Ticker, Tag Cloud) < 3.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Count (Static) Widget
Fixed in
Fixed in 3.11.8
CVSS
6.4 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.6.4
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 2.9.1
CVSS
4.3 (medium)