wpmet ElementsKit Pro vulnerabilities

CVEs per yearBy the year they were published

1. 20247
2. 20251
3. 20261

Newest CVEs

• CVE-2026-4246

  ElementsKit Pro <= 4.10.1 - Unauthenticated Stored Cross-Site Scripting via 's' Parameter

  wpmet · ElementsKit Pro

  Medium6.1
• CVE-2025-0321

  ElementsKit Pro <= 3.7.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via url Parameter

  wpmet · ElementsKit Pro

  Medium6.4
• CVE-2024-7063

  ElementsKit Pro <= 3.6.6 - Authenticated (Contributor+) Sensitive Information Exposure

  wpmet · ElementsKit Pro

  Medium4.3
• CVE-2024-7064

  ElementsKit Pro <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

  wpmet · ElementsKit Pro

  Medium6.4
• CVE-2024-5263

  ElementsKit Elementor addons and Templates Library <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Motion Text and Table Widgets

  wpmet · ElementsKit Pro

  Medium6.4
• CVE-2024-4404

  ElementsKit PRO <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery

  wpmet · ElementsKit Pro

  High8.5
• CVE-2024-4452

  ElementsKit Pro <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  wpmet · ElementsKit Pro

  Medium6.4
• CVE-2024-3500

  ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets

  wpmet · ElementsKit Pro

  High8.8
• CVE-2024-3598

  ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ekit_btn_id'

  wpmet · ElementsKit Pro

  Medium6.4