Wpmet Elementskit vulnerabilities

• roxnor elementskit elementor addons lite WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-103063 6.5 MediumOctober 1, 2026
• roxnor elementskit elementor addons lite WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-103064 6.5 MediumOctober 1, 2026
• wpmet elementskit pro ElementsKit Pro <= 4.10.1 - Unauthenticated Stored Cross-Site Scripting via 's' Parameter CVE-2026-4246 6.1 MediumAugust 28, 2026
• roxnor elementskit elementor addons lite WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability CVE-2026-49053 5.3 MediumMay 27, 2026
• roxnor elementskit elementor addons lite WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability CVE-2026-49052 4.3 MediumMay 27, 2026
• wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 more ElementsKit Elementor Addons and Templates <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Widget CVE-2025-3614 6.4 MediumJuly 24, 2025
• wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 more ElementsKit Lite <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget CVE-2025-4479 6.4 MediumJune 19, 2025
• wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 more ElementsKit Elementor addons <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11180 6.4 MediumMarch 29, 2025
• wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 more ElementsKit Elementor addons <= 3.4.0 - Unauthenticated Information Exposure via get_megamenu_content Function CVE-2025-0968 5.3 MediumFebruary 19, 2025
• wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 more ElementsKit Elementor addons <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget CVE-2025-1005 6.4 MediumFebruary 15, 2025
• wpmet elementskit, elementskit pro +1 more ElementsKit Pro <= 3.7.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via url Parameter CVE-2025-0321 6.4 MediumJanuary 28, 2025
• wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 more ElementsKit Elementor addons <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget CVE-2024-8546 6.4 MediumSeptember 25, 2024
• elementskit pro, wpmet elementskit, elementskit pro +2 more WordPress ElementsKit Pro plugin <= 3.6.0 - Local File Inclusion vulnerability CVE-2024-43996 6.5 MediumSeptember 23, 2024
• wpmet elementskit, elementskit pro +1 more ElementsKit Pro <= 3.6.6 - Authenticated (Contributor+) Sensitive Information Exposure CVE-2024-7063 4.3 MediumAugust 15, 2024
• wpmet elementskit, elementskit pro +1 more ElementsKit Pro <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-7064 6.4 MediumAugust 15, 2024
• wpmet elementskit, elementskit pro +1 more ElementsKit Elementor addons and Templates Library <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Motion Text and Table Widgets CVE-2024-5263 6.4 MediumJune 15, 2024
• wpmet elementskit, elementskit pro +1 more ElementsKit PRO <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery CVE-2024-4404 8.5 HighJune 14, 2024
• wpmet elementskit, elementskit pro +1 more ElementsKit Pro <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-4452 6.4 MediumMay 21, 2024
• wpmet elementskit, elementskit pro +1 more ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets CVE-2024-3500 8.8 HighMay 2, 2024
• wpmet elementskit, elementskit pro +1 more ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ekit_btn_id' CVE-2024-3598 6.4 MediumApril 19, 2024
• wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 more ElementsKit Elementor addons <= 3.0.3 - Authenticated(Editor+) Stored Cross-Site Scripting CVE-2023-6525 5.5 MediumMarch 16, 2024