News Kit Elementor Addons vulnerabilities | LiveThreat CVE Feed

Product

News Kit Elementor Addons

by blazethemes · last CVE Oct 29, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 5Low 0

Severity

Exploitation

Watch

Add News Kit Elementor Addons to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-118073 New	8.8	–	Oct 29	WordPress News Kit Elementor Addons plugin <= 1.5.0 - PHP Object Injection vulnerability Affected: through 1.5.0
CVE-2025-32196	6.5	0%	Apr 4	WordPress News Kit Elementor Addons plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability Affected: through 1.4.2
CVE-2024-54260	6.5	0%	Dec 9	WordPress News Kit Elementor Addons plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability Affected: through 1.4.2
CVE-2025-54037	5.4	0%	Jul 16	WordPress News Kit Elementor Addons plugin <= 1.3.4 - Broken Access Control Vulnerability Affected: through 1.3.4
CVE-2026-25416	4.3	0%	Feb 19	WordPress News Kit Elementor Addons plugin <= 1.4.2 - Broken Access Control vulnerability Affected: through 1.4.2
CVE-2024-9541	4.3	0%	Oct 22	News Kit Elementor Addons <= 1.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Canvas Menu Elementor Template Affected: before 1.2.2