VendorsThemesgroveall-in-one_addons_for_elementorany version
Vulnerabilities

Themesgrove All-in-one Addons for Elementor any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2024-37428
WordPress All-in-One Addons for Elementor – WidgetKit plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability
Published 2024-07-22 · Modified
6.5EPSS 0.003
CVE-2024-2137
All-in-One Addons for Elementor – WidgetKit <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Widgets
Published 2024-04-12 · Modified
6.4EPSS 0.003
CVE-2025-2330
All-in-One Addons for Elementor – WidgetKit <= 2.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via button+modal Widget
Published 2025-07-02 · Analyzed
6.4EPSS 0.003
CVE-2021-24267
All-in-One Addons for Elementor - WidgetKit < 2.3.10 - Contributor+ Stored XSS
Published 2021-05-05 · Modified
5.4EPSS 0.007
CVE-2022-4256
All-in-One Addons for Elementor - WidgetKit < 2.4.4 - Admin+ Stored XSS
Published 2023-01-02 · Modified
4.8EPSS 0.005
CVE-2024-10321
All-in-One Addons for Elementor – WidgetKit <= 2.5.5 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Published 2025-03-08 · Modified
4.3EPSS 0.003