Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

ElementsKit Pro — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in ElementsKit Pro, with AI-generated Chinese analysis, references, and POCs.

Vendor: wpmet

CVE IDTitleCVSSSeverityPublished
CVE-2025-0321 ElementsKit Pro <= 3.7.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via url Parameter CWE-79 6.4 Medium2025-01-28
CVE-2024-43996 WordPress ElementsKit Pro plugin <= 3.6.0 - Local File Inclusion vulnerability CWE-22 6.5 Medium2024-09-23
CVE-2024-7063 ElementsKit Pro <= 3.6.6 - Authenticated (Contributor+) Sensitive Information Exposure CWE-200 4.3 Medium2024-08-15
CVE-2024-7064 ElementsKit Pro <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2024-08-15
CVE-2024-5263 ElementsKit Elementor addons and Templates Library <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Motion Text and Table Widgets CWE-79 6.4 Medium2024-06-15
CVE-2024-4404 ElementsKit PRO <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery CWE-918 8.5 High2024-06-14
CVE-2024-4452 ElementsKit Pro <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2024-05-21
CVE-2024-3500 ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets CWE-98 8.8 High2024-05-02
CVE-2024-3598 ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ekit_btn_id' CWE-79 6.4 Medium2024-04-19

All 9 known CVE vulnerabilities affecting ElementsKit Pro with full Chinese analysis, references, and POCs where available.