EE
Product
Elementskit Elementor Addons
7
CVEs
0
On KEV
5.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 7Low 0
Watch
Add Elementskit Elementor Addons to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-3614 | 5.4 | Jul 24 | ElementsKit Elementor Addons and Templates <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Widget Affected: before 3.5.3 |
| CVE-2025-4479 | 5.4 | Jun 19 | ElementsKit Lite <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget Affected: before 3.5.3 |
| CVE-2024-11180 | 5.4 | Mar 29 | ElementsKit Elementor addons <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 3.4.8 |
| CVE-2025-1005 | 5.4 | Feb 15 | ElementsKit Elementor addons <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget Affected: before 3.4.1 |
| CVE-2024-8546 | 5.4 | Sep 25 | ElementsKit Elementor addons <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget Affected: before 3.2.8 |
| CVE-2025-0968 | 5.3 | Feb 19 | ElementsKit Elementor addons <= 3.4.0 - Unauthenticated Information Exposure via get_megamenu_content Function Affected: before 3.4.1 |
| CVE-2023-6525 | 4.8 | Mar 16 | ElementsKit Elementor addons <= 3.0.3 - Authenticated(Editor+) Stored Cross-Site Scripting Affected: before 3.0.4 |
Showing 7