WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
elements-plus
Published
2024-03-14
Title
Elements Plus! < 2.16.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget links
Slug
elements-plus
Published
2024-04-15
Title
Elements Plus! < 2.16.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elements-plus
Published
2025-09-10
Title
Elements Plus! < 2.16.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
elementskit
Published
2021-04-13
Title
ElementsKit and ElementsKit Pro < 2.2.0 - Contributor+ Stored XSS
Slug
elementskit
Published
2024-04-18
Title
ElementsKit Pro < 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ekit_btn_id'
Slug
elementskit
Published
2024-04-25
Title
ElementsKit Pro < 3.6.1 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets
Slug
elementskit
Published
2024-05-20
Title
ElementsKit Pro < 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elementskit
Published
2024-06-13
Title
ElementsKit PRO < 3.6.3 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
elementskit
Published
2024-06-14
Title
ElementsKit Elementor addons and Templates Library < 3.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Motion Text and Table Widgets
Slug
elementskit
Published
2024-08-14
Title
ElementsKit Pro < 3.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elementskit
Published
2024-08-14
Title
ElementsKit Pro < 3.6.7 - Authenticated (Contributor+) Sensitive Information Exposure
Slug
elementskit
Published
2025-01-27
Title
ElementsKit Pro < 3.7.9 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via url Parameter
Slug
elementskit-lite
Published
2021-04-13
Title
ElementsKit and ElementsKit Pro < 2.2.0 - Contributor+ Stored XSS
Slug
elementskit-lite
Published
2023-08-23
Title
Elements kit Elementor addons < 2.9.2 - Missing Authorization
Slug
elementskit-lite
Published
2024-01-08
Title
ElementsKit Lite < 3.0.4 - Unauthenticated Sensitive Information Exposure
Slug
elementskit-lite
Published
2024-03-15
Title
ElementsKit Elementor addons < 3.0.5 - Contributor+ Stored XSS
Slug
elementskit-lite
Published
2024-03-15
Title
ElementsKit Elementor addons < 3.0.4 - Contributor+ Stored XSS
Slug
elementskit-lite
Published
2024-03-29
Title
ElementsKit Elementor addons < 3.0.7 - Contributor+ Local File Inclusion
Slug
elementskit-lite
Published
2024-03-29
Title
ElementsKit Elementor addons < 3.0.7 - Contributor+ Stored XSS
Slug
elementskit-lite
Published
2024-04-03
Title
ElementsKit Elementor addons < 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Slug
elementskit-lite
Published
2024-03-15
Title
ElementsKit Elementor addons < 3.0.6 - Contributor+ Stored XSS
Slug
elementskit-lite
Published
2024-04-22
Title
ElementsKit Elementor addons < 3.1.1 - Contributor+ Local File Inclusion via Onepage Scroll Module
Slug
elementskit-lite
Published
2024-04-30
Title
ElementsKit Elementor addons 3.0.7 - 3.1.2 - Contributor+ Stored XSS
Slug
elementskit-lite
Published
2024-06-27
Title
Elements kit Elementor addons < 3.2.0 - Missing Authorization
Slug
elementskit-lite
Published
2024-07-18
Title
ElementsKit Elementor addons < 3.2.1 - Unauthenticated Information Exposure via ekit_widgetarea_content Function