Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

WidgetKit — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in WidgetKit, with AI-generated Chinese analysis, references, and POCs.

Vendor: Themesgrove

CVE IDTitleCVSSSeverityPublished
CVE-2025-49074 WordPress WidgetKit plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2025-06-06
CVE-2024-37428 WordPress All-in-One Addons for Elementor – WidgetKit plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2024-07-22
CVE-2024-34548 WordPress All-in-One Addons for Elementor – WidgetKit plugin <= 2.4.8 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2024-05-08
CVE-2024-33908 WordPress WidgetKit plugin <= 2.5.0 - Broken Access Control vulnerability CWE-862 5.3 Medium2024-05-06

All 4 known CVE vulnerabilities affecting WidgetKit with full Chinese analysis, references, and POCs where available.