Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

All-in-One Addons for Elementor – WidgetKit — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in All-in-One Addons for Elementor – WidgetKit, with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE IDTitleCVSSSeverityPublished
CVE-2025-8779 All-in-One Addons for Elementor – WidgetKit <= 2.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team and Countdown Widgets CWE-79 6.4 Medium2025-12-13
CVE-2025-2330 All-in-One Addons for Elementor – WidgetKit <= 2.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via button+modal Widget CWE-79 6.4 Medium2025-07-02
CVE-2024-10321 All-in-One Addons for Elementor – WidgetKit <= 2.5.5 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates CWE-200 4.3 Medium2025-03-08
CVE-2024-2137 All-in-One Addons for Elementor – WidgetKit <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Widgets CWE-79 6.4 Medium2024-04-12
CVE-2021-24267 All-in-One Addons for Elementor - WidgetKit < 2.3.10 - Contributor+ Stored XSS CWE-79 5.4 -2021-05-05

All 5 known CVE vulnerabilities affecting All-in-One Addons for Elementor – WidgetKit with full Chinese analysis, references, and POCs where available.