Login Request a demo
EL
Product
Elementskit
by Wpmet · last CVE Jan 28, 2025
9
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 1Medium 7Low 0
Severity
All severities9Critical1High1Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Elementskit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-43996
6.5
1%
Sep 23
WordPress ElementsKit Pro plugin <= 3.6.0 - Local File Inclusion vulnerability
Affected: through 3.6.0
CVE-2025-0321
5.4
0%
Jan 28
ElementsKit Pro <= 3.7.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via url Parameter
Affected: before 3.7.9
CVE-2024-7064
5.4
0%
Aug 15
ElementsKit Pro <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 3.6.6
CVE-2024-5263
5.4
0%
Jun 15
The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Motion Text and Table widgets in all versions up to, and including, 3.6.2…
Affected: before 3.6.3
CVE-2024-4452
5.4
0%
May 21
The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in versions up to, and including, 3.6.1 due to insufficient input…
Affected: before 3.6.2
CVE-2024-3598
5.4
0%
Apr 19
The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Creative Button widget in all versions up to, and including, 3.6.0 due to…
Affected: before 3.6.1
CVE-2024-7063
4.3
0%
Aug 15
ElementsKit Pro <= 3.6.6 - Authenticated (Contributor+) Sensitive Information Exposure
Affected: before 3.6.7
Showing 7