EK
Product
Elements kit Elementor addons
14
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 12Low 0
Watch
Add Elements kit Elementor addons to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-3499 | 8.8 | May 2 | ElementsKit Elementor addons <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Onepage Scroll Module Affected: before 3.1.1 |
| CVE-2024-2047 | 8.8 | Mar 30 | ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Local File Inclusion in render_raw Affected: before 3.0.7 |
| CVE-2024-10091 | 5.4 | Oct 26 | ElementsKit Elementor addons <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget Affected: before 3.3.0 |
| CVE-2024-3650 | 5.4 | May 2 | The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Accordion widget in all versions 3.0.7 through 3.1.2 due to… Affected: 3.0.7 before 3.1.3 |
| CVE-2024-32505 | 5.4 | Apr 17 | WordPress ElementsKit Elementor addons plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability Affected: before 3.0.7 |
| CVE-2024-2803 | 5.4 | Apr 4 | ElementsKit Elementor addons <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget Affected: before 3.1.0 |
| CVE-2024-1238 | 5.4 | Mar 30 | ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 3.0.7 |
| CVE-2024-2042 | 5.4 | Mar 16 | ElementsKit Elementor addons <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget Affected: before 3.0.6 |
| CVE-2024-1239 | 5.4 | Mar 16 | ElementsKit Elementor addons <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 3.0.5 |
| CVE-2021-24258 | 5.4 | May 5 | The Elements Kit Lite and Elements Kit Pro WordPress Plugins before 2.2.0 have a number of widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged… Affected: before 2.2.0 |
| CVE-2024-37255 | 5.3 | Nov 1 | WordPress ElementsKit Lite plugin <= 3.1.4 - Unauthenticated Broken Access Control vulnerability Affected: before 3.2.0 |
| CVE-2024-6455 | 5.3 | Jul 18 | ElementsKit Elementor addons <= 3.2.0 - Unauthenticated Information Exposure via ekit_widgetarea_content Function Affected: before 3.2.1 |
| CVE-2023-6582 | 5.3 | Jan 11 | The ElementsKit Elementor addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.3 via the ekit_widgetarea_content… Affected: before 3.0.4 |
| CVE-2023-39993 | 4.3 | Jun 19 | WordPress ElementsKit Lite plugin <= 2.9.0 - Broken Access Control vulnerability Affected: through 2.9.0 |
Showing 14