VendorsWpmetelementskitall versions
Vulnerabilities

Wpmet Elementskit

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2024-4404
ElementsKit PRO <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery
Published 2024-06-14 · Modified
9.6EPSS 0.003
CVE-2024-3500
ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets
Published 2024-05-02 · Modified
8.8EPSS 0.011
CVE-2024-43996
WordPress ElementsKit Pro plugin <= 3.6.0 - Local File Inclusion vulnerability
Published 2024-09-23 · Analyzed
6.5EPSS 0.006
CVE-2024-3598
ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ekit_btn_id'
Published 2024-04-19 · Modified
6.4EPSS 0.003
CVE-2024-4452
ElementsKit Pro <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2024-05-21 · Modified
6.4EPSS 0.003
CVE-2024-5263
ElementsKit Elementor addons and Templates Library <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Motion Text and Table Widgets
Published 2024-06-15 · Modified
6.4EPSS 0.003
CVE-2024-7064
ElementsKit Pro <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2024-08-15 · Analyzed
6.4EPSS 0.003
CVE-2025-0321
ElementsKit Pro <= 3.7.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via url Parameter
Published 2025-01-28 · Analyzed
6.4EPSS 0.003
CVE-2024-7063
ElementsKit Pro <= 3.6.6 - Authenticated (Contributor+) Sensitive Information Exposure
Published 2024-08-15 · Analyzed
4.3EPSS 0.004