Plugin icon

All-in-One Addons for Elementor – WidgetKit

widgetkit-for-elementor

Vulnerabilities:

10

Last Updated:

December 31, 2025

Active Installs:

9000

Published
Title
Fixed in
CVSS
Published
2025-12-12
Title
All-in-One Addons for Elementor – WidgetKit < 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team and Countdown Widgets
Fixed in
Fixed in 2.5.7
CVSS
6.4 (medium)
Published
2025-07-01
Title
All-in-One Addons for Elementor – WidgetKit < 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via button+modal Widget
Fixed in
Fixed in 2.5.5
CVSS
6.4 (medium)
Published
2025-05-30
Title
WidgetKit < 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.5.5
CVSS
6.4 (medium)
Published
2025-03-07
Title
All-in-One Addons for Elementor – WidgetKit <= 2.5.5 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2024-06-28
Title
WidgetKit < 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.5.1
CVSS
6.4 (medium)
Published
2024-05-07
Title
All-in-One Addons for Elementor – WidgetKit < 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.5.0
CVSS
6.4 (medium)
Published
2024-04-29
Title
WidgetKit < 2.5.5 - Missing Authorization to Notice Dismissal
Fixed in
Fixed in 2.5.5
CVSS
0.0 (none)
Published
2024-04-11
Title
WidgetKit <= 2.5.1 - Contributor+ Stored XSS
Fixed in
No known fix
CVSS
6.4 (medium)
Published
2022-12-06
Title
All-in-One Addons for Elementor - WidgetKit < 2.4.4 - Admin+ Stored XSS
Fixed in
Fixed in 2.4.4
CVSS
3.4 (low)
Published
2021-04-13
Title
All-in-One Addons for Elementor - WidgetKit < 2.3.10 - Contributor+ Stored XSS
Fixed in
Fixed in 2.3.10
CVSS
6.8 (medium)