Login Request a demo
EL
Product
Elementskit
by Wpmet · last CVE Jan 28, 2025
9
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 1Medium 7Low 0
Severity
All severities9Critical1High1Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Elementskit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-4404
9.6
0%
Jun 14
The ElementsKit PRO plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.6.2 via the 'render_raw' function
Affected: before 3.6.3
CVE-2024-3500
8.8
1%
May 2
The ElementsKit Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.6.0 via the Price Menu, Hotspot, and Advanced Toggle widgets
Affected: before 3.6.1
CVE-2024-43996
6.5
1%
Sep 23
WordPress ElementsKit Pro plugin <= 3.6.0 - Local File Inclusion vulnerability
Affected: through 3.6.0
CVE-2025-0321
5.4
0%
Jan 28
ElementsKit Pro <= 3.7.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via url Parameter
Affected: before 3.7.9
CVE-2024-7064
5.4
0%
Aug 15
The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 3.6.5 due to insufficient input…
Affected: before 3.6.6
CVE-2024-5263
5.4
0%
Jun 15
The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Motion Text and Table widgets in all versions up to, and including, 3.6.2…
Affected: before 3.6.3
CVE-2024-4452
5.4
0%
May 21
The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in versions up to, and including, 3.6.1 due to insufficient input…
Affected: before 3.6.2
CVE-2024-3598
5.4
0%
Apr 19
The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Creative Button widget in all versions up to, and including, 3.6.0 due to…
Affected: before 3.6.1
CVE-2024-7063
4.3
0%
Aug 15
The ElementsKit Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.6 via the 'render_raw' function
Affected: before 3.6.7
Showing 9