Skip to content
Wpmet Elementskit Pro vulnerabilities
-
wpmet elementskit pro
ElementsKit Pro <= 4.10.1 - Unauthenticated Stored Cross-Site Scripting via 's' Parameter
CVE-2026-4246
6.1 Medium
-
wpmet elementskit, elementskit pro +1 more
ElementsKit Pro <= 3.7.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via url Parameter
CVE-2025-0321
6.4 Medium
-
elementskit pro, wpmet elementskit, elementskit pro +2 more
WordPress ElementsKit Pro plugin <= 3.6.0 - Local File Inclusion vulnerability
CVE-2024-43996
6.5 Medium
-
wpmet elementskit, elementskit pro +1 more
ElementsKit Pro <= 3.6.6 - Authenticated (Contributor+) Sensitive Information Exposure
CVE-2024-7063
4.3 Medium
-
wpmet elementskit, elementskit pro +1 more
ElementsKit Pro <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-7064
6.4 Medium
-
wpmet elementskit, elementskit pro +1 more
ElementsKit Elementor addons and Templates Library <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Motion Text and Table Widgets
CVE-2024-5263
6.4 Medium
-
wpmet elementskit, elementskit pro +1 more
ElementsKit PRO <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery
CVE-2024-4404
8.5 High
-
wpmet elementskit, elementskit pro +1 more
ElementsKit Pro <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-4452
6.4 Medium
-
wpmet elementskit, elementskit pro +1 more
ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets
CVE-2024-3500
8.8 High
-
wpmet elementskit, elementskit pro +1 more
ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ekit_btn_id'
CVE-2024-3598
6.4 Medium