WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
elementskit
Published
2025-01-27
Title
ElementsKit Pro < 3.7.9 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via url Parameter
Slug
elementskit
Published
2026-08-27
Title
ElementsKit Pro < 4.10.2 - Unauthenticated Stored Cross-Site Scripting via 's' Parameter
Slug
elementskit-lite
Published
2021-04-13
Title
ElementsKit and ElementsKit Pro < 2.2.0 - Contributor+ Stored XSS
Slug
elementskit-lite
Published
2023-08-23
Title
Elements kit Elementor addons < 2.9.2 - Missing Authorization
Slug
elementskit-lite
Published
2024-01-08
Title
ElementsKit Lite < 3.0.4 - Unauthenticated Sensitive Information Exposure
Slug
elementskit-lite
Published
2024-03-15
Title
ElementsKit Elementor addons < 3.0.5 - Contributor+ Stored XSS
Slug
elementskit-lite
Published
2024-03-15
Title
ElementsKit Elementor addons < 3.0.4 - Contributor+ Stored XSS
Slug
elementskit-lite
Published
2024-03-29
Title
ElementsKit Elementor addons < 3.0.7 - Contributor+ Local File Inclusion
Slug
elementskit-lite
Published
2024-03-29
Title
ElementsKit Elementor addons < 3.0.7 - Contributor+ Stored XSS
Slug
elementskit-lite
Published
2024-04-03
Title
ElementsKit Elementor addons < 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Slug
elementskit-lite
Published
2024-03-15
Title
ElementsKit Elementor addons < 3.0.6 - Contributor+ Stored XSS
Slug
elementskit-lite
Published
2024-04-22
Title
ElementsKit Elementor addons < 3.1.1 - Contributor+ Local File Inclusion via Onepage Scroll Module
Slug
elementskit-lite
Published
2024-04-30
Title
ElementsKit Elementor addons 3.0.7 - 3.1.2 - Contributor+ Stored XSS
Slug
elementskit-lite
Published
2024-06-27
Title
Elements kit Elementor addons < 3.2.0 - Missing Authorization
Slug
elementskit-lite
Published
2024-07-18
Title
ElementsKit Elementor addons < 3.2.1 - Unauthenticated Information Exposure via ekit_widgetarea_content Function
Slug
elementskit-lite
Published
2024-09-24
Title
ElementsKit Elementor addons < 3.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget
Slug
elementskit-lite
Published
2024-10-25
Title
ElementsKit Elementor addons < 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget
Slug
elementskit-lite
Published
2025-02-14
Title
ElementsKit Elementor addons < 3.4.1 - Contributor+ Stored XSS
Slug
elementskit-lite
Published
2025-02-18
Title
ElementsKit Elementor addons < 3.4.1 - Unauthenticated Information Exposure
Slug
elementskit-lite
Published
2025-03-28
Title
ElementsKit Elementor addons < 3.4.8 - Contributor+ Stored XSS
Slug
elementskit-lite
Published
2025-06-18
Title
ElementsKit Lite < 3.5.3 - Contributor+ Stored XSS via Image Comparison Widget
Slug
elementskit-lite
Published
2025-07-24
Title
ElementsKit Elementor Addons and Templates < 3.5.3 - Contributor+ Stored XSS
Slug
elementskit-lite
Published
2026-02-24
Title
ElementsKit Elementor addons Lite < 3.7.9 - Missing Authorization
Slug
elementskit-lite
Published
2026-04-03
Title
ElementsKit Elementor Addons and Templates < 3.8.0 - Contributor+ Stored XSS via Simple Tab Widget
Slug
elementskit-lite
Published
2026-05-04
Title
ElementsKit Elementor Addons < 3.9.0 - Unauthenticated Missing Authorization to Widget Content Overwrite