Kraft Plugins vulnerabilities

Products

• Demo Importer Plus 5
• Mega Elements 2
• Wheel Of Life 2

Newest

• kraft plugins wheel of life WordPress Wheel of Life plugin <= 1.2.0 - Broken Access Control vulnerability CVE-2026-25000 5.3 MediumFebruary 19, 2026
• kraft plugins demo importer plus Demo Importer Plus <= 2.0.9 - Authenticated (Author+) Blind XML External Entity Injection via SVG File Upload CVE-2025-14478 7.5 HighJanuary 17, 2026
• kraft plugins demo importer plus WordPress Demo Importer Plus plugin <= 2.0.8 - Broken Access Control vulnerability CVE-2025-69091 4.3 MediumDecember 30, 2025
• kraft plugins demo importer plus Demo Importer Plus <= 2.0.8 - Missing Authorization to Authenticated (Subscriber+) Site Reset and Privilege Escalation CVE-2025-14364 Public exploit 8.8 HighDecember 18, 2025
• kraft plugins demo importer plus Demo Importer Plus <= 2.0.6 - Authenticated (Author+) Arbitrary File Upload via WXR Upload Bypass CVE-2025-13066 8.8 HighDecember 5, 2025
• kraft plugins wheel of life WordPress Wheel of Life plugin <= 1.1.8 - Broken Access Control vulnerability CVE-2024-47311 5.3 MediumNovember 1, 2024
• kraft plugins mega elements WordPress Mega Elements – Addons for Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability CVE-2024-49693 6.5 MediumOctober 24, 2024
• kraft plugins mega elements WordPress Mega Elements – Addons for Elementor plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability CVE-2024-47343 6.5 MediumOctober 6, 2024
• kraft plugins demo importer plus Demo Importer Plus <= 2.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVE-2024-9172 6.4 MediumOctober 2, 2024