Elements kit Elementor addons vulnerabilities | LiveThreat CVE Feed

Product

Elements kit Elementor addons

by Wpmet · last CVE Nov 1, 2024

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities14 In the news0 Timeline

Severity mix

Critical 0High 2Medium 12Low 0

Severity

All severities14 Critical0 High2 Medium12 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Elements kit Elementor addons to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-10091	5.4	0%	Oct 26	ElementsKit Elementor addons <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget Affected: before 3.3.0
CVE-2024-3650	5.4	0%	May 2	The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Accordion widget in all versions 3.0.7 through 3.1.2 due to… Affected: 3.0.7 before 3.1.3
CVE-2024-32505	5.4	0%	Apr 17	WordPress ElementsKit Elementor addons plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability Affected: before 3.0.7
CVE-2024-2803	5.4	0%	Apr 4	ElementsKit Elementor addons <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget Affected: before 3.1.0
CVE-2024-1238	5.4	0%	Mar 30	ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 3.0.7
CVE-2024-2042	5.4	0%	Mar 16	ElementsKit Elementor addons <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget Affected: before 3.0.6
CVE-2024-1239	5.4	0%	Mar 16	ElementsKit Elementor addons <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 3.0.5
CVE-2021-24258	5.4	1%	May 5	The Elements Kit Lite and Elements Kit Pro WordPress Plugins before 2.2.0 have a number of widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged… Affected: before 2.2.0
CVE-2024-37255	5.3	0%	Nov 1	WordPress ElementsKit Lite plugin <= 3.1.4 - Unauthenticated Broken Access Control vulnerability Affected: before 3.2.0
CVE-2024-6455	5.3	0%	Jul 18	ElementsKit Elementor addons <= 3.2.0 - Unauthenticated Information Exposure via ekit_widgetarea_content Function Affected: before 3.2.1
CVE-2023-6582	5.3	1%	Jan 11	ElementsKit Lite <= 3.0.3 - Unauthenticated Sensitive Information Exposure Affected: before 3.0.4
CVE-2023-39993	4.3	0%	Jun 19	WordPress ElementsKit Lite plugin <= 2.9.0 - Broken Access Control vulnerability Affected: through 2.9.0