EP
Product
ElementsKit Pro
9
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 7Low 0
Watch
Add ElementsKit Pro to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-4404 | 9.6 | Jun 14 | ElementsKit PRO <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery Affected: through 3.6.2 |
| CVE-2024-3500 | 8.8 | May 2 | ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets Affected: through 3.6.0 |
| CVE-2026-4246 | 6.1 | Aug 28 | ElementsKit Pro <= 4.10.1 - Unauthenticated Stored Cross-Site Scripting via 's' Parameter Affected: through 4.10.1 |
| CVE-2025-0321 | 5.4 | Jan 28 | ElementsKit Pro <= 3.7.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via url Parameter Affected: through 3.7.8 |
| CVE-2024-7064 | 5.4 | Aug 15 | ElementsKit Pro <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 3.6.5 |
| CVE-2024-5263 | 5.4 | Jun 15 | ElementsKit Elementor addons and Templates Library <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Motion Text and Table Widgets Affected: through 3.6.2 |
| CVE-2024-4452 | 5.4 | May 21 | ElementsKit Pro <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 3.6.1 |
| CVE-2024-3598 | 5.4 | Apr 19 | ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ekit_btn_id' Affected: through 3.6.0 |
| CVE-2024-7063 | 4.3 | Aug 15 | ElementsKit Pro <= 3.6.6 - Authenticated (Contributor+) Sensitive Information Exposure Affected: through 3.6.6 |
Showing 9