kraftplugins vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20253
3. 20261

Newest CVEs

• CVE-2025-14478

  Demo Importer Plus <= 2.0.9 - Authenticated (Author+) Blind XML External Entity Injection via SVG File Upload

  kraftplugins · Demo Importer Plus

  High7.5
• CVE-2025-14364

  Demo Importer Plus <= 2.0.8 - Missing Authorization to Authenticated (Subscriber+) Site Reset and Privilege Escalation

  kraftplugins · Demo Importer Plus

  High8.8
• CVE-2025-13066

  Demo Importer Plus <= 2.0.6 - Authenticated (Author+) Arbitrary File Upload via WXR Upload Bypass

  kraftplugins · Demo Importer Plus

  High8.8
• CVE-2025-8200

  Mega Elements – Addons for Elementor <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget

  kraftplugins · Mega Elements – Addons for Elementor

  Medium6.4
• CVE-2024-9172

  Demo Importer Plus <= 2.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

  kraftplugins · Demo Importer Plus

  Medium6.4
• CVE-2024-37466

  WordPress Mega Elements plugin <= 1.2.2 - Contributor+ Cross Site Scripting (XSS) vulnerability

  Kraftplugins · Mega Elements

  Medium6.5
• CVE-2024-3627

  Wheel of Life: Coaching and Assessment Tool for Life Coach <= 1.1.7 - Missing Authorization on Several AJAX Endpoints

  kraftplugins · Wheel of Life: Coaching and Assessment Tool for Life Coach

  Medium5.4
• CVE-2024-4702

  Mega Elements <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget

  kraftplugins · Mega Elements – Addons for Elementor

  Medium6.4
• CVE-2024-32575

  WordPress Mega Elements plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability

  Kraftplugins · Mega Elements

  Medium6.5