EE
Product
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor
19
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 16Low 0
Watch
Add ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-23693 | 10.0 | Feb 23 | ElementsKit Elementor Addons < 3.7.9 Unauthenticated Mailchimp REST Endpoint Affected: before 3.7.9 |
| CVE-2024-3499 | 8.8 | May 2 | ElementsKit Elementor addons <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Onepage Scroll Module Affected: through 3.1.0 |
| CVE-2024-2047 | 8.8 | Mar 30 | ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Local File Inclusion in render_raw Affected: through 3.0.6 |
| CVE-2026-4362 | 6.5 | May 5 | ElementsKit Elementor Addons <= 3.8.2 - Missing Authorization to Unauthenticated Widget Content Overwrite Affected: through 3.8.2 |
| CVE-2026-2600 | 6.4 | Apr 4 | ElementsKit Elementor Addons and Templates <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Simple Tab Widget Affected: through 3.7.9 |
| CVE-2025-3614 | 5.4 | Jul 24 | ElementsKit Elementor Addons and Templates <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Widget Affected: through 3.5.2 |
| CVE-2025-4479 | 5.4 | Jun 19 | ElementsKit Lite <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget Affected: through 3.5.2 |
| CVE-2024-11180 | 5.4 | Mar 29 | ElementsKit Elementor addons <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 3.4.7 |
| CVE-2025-1005 | 5.4 | Feb 15 | ElementsKit Elementor addons <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget Affected: through 3.4.0 |
| CVE-2024-10091 | 5.4 | Oct 26 | ElementsKit Elementor addons <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget Affected: through 3.2.9 |
| CVE-2024-8546 | 5.4 | Sep 25 | ElementsKit Elementor addons <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget Affected: through 3.2.7 |
| CVE-2024-2803 | 5.4 | Apr 4 | ElementsKit Elementor addons <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget Affected: through 3.0.7 |
| CVE-2024-1238 | 5.4 | Mar 30 | ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 3.0.6 |
| CVE-2024-2042 | 5.4 | Mar 16 | ElementsKit Elementor addons <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget Affected: through 3.0.5 |
| CVE-2024-1239 | 5.4 | Mar 16 | ElementsKit Elementor addons <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 3.0.4 |
| CVE-2025-0968 | 5.3 | Feb 19 | ElementsKit Elementor addons <= 3.4.0 - Unauthenticated Information Exposure via get_megamenu_content Function Affected: through 3.4.0 |
| CVE-2024-6455 | 5.3 | Jul 18 | ElementsKit Elementor addons <= 3.2.0 - Unauthenticated Information Exposure via ekit_widgetarea_content Function Affected: through 3.2.0 |
| CVE-2023-6582 | 5.3 | Jan 11 | ElementsKit Lite <= 3.0.3 - Unauthenticated Sensitive Information Exposure Affected: through 3.0.3 |
| CVE-2023-6525 | 4.8 | Mar 16 | ElementsKit Elementor addons <= 3.0.3 - Authenticated(Editor+) Stored Cross-Site Scripting Affected: through 3.0.3 |
Showing 19