Themesgrove Widgetkit vulnerabilities

• themesgrove widgetkit pro WordPress WidgetKit Pro plugin <= 1.13.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-46494 7.1 HighJanuary 7, 2026
• abu huraira bin aman widgetkit WordPress WidgetKit plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability CVE-2025-49074 6.5 MediumJune 6, 2025
• themesgrove all-in-one addons for elementor, widgetkit +1 more WordPress All-in-One Addons for Elementor – WidgetKit plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-37428 6.5 MediumJuly 22, 2024
• themesgrove widgetkit WordPress All-in-One Addons for Elementor – WidgetKit plugin <= 2.4.8 - Cross Site Scripting (XSS) vulnerability CVE-2024-34548 6.5 MediumMay 8, 2024
• themesgrove widgetkit WordPress WidgetKit plugin <= 2.5.0 - Broken Access Control vulnerability CVE-2024-33908 5.3 MediumMay 6, 2024