Skip to content
Noroxi

All-in-One Addons for Elementor – WidgetKit

widgetkit-for-elementor · plugin

Known security vulnerabilities for All-in-One Addons for Elementor – WidgetKit. Find out in seconds which version runs on your site with WP Lens.

8 known vulnerabilities

latest Dec 13, 2025

Vulnerabilities

  • CVE-2025-49074

    WordPress WidgetKit plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2024-34548

    WordPress All-in-One Addons for Elementor – WidgetKit plugin <= 2.4.8 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2025-8779

    All-in-One Addons for Elementor – WidgetKit <= 2.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team and Countdown Widgets

    Medium 6.4

  • CVE-2025-2330

    All-in-One Addons for Elementor – WidgetKit <= 2.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via button+modal Widget

    Medium 5.4

  • CVE-2024-37428

    WordPress All-in-One Addons for Elementor – WidgetKit plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability

    Medium 5.4

  • CVE-2024-2137

    All-in-One Addons for Elementor – WidgetKit <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Widgets

    Medium 5.4

  • CVE-2024-33908

    WordPress WidgetKit plugin <= 2.5.0 - Broken Access Control vulnerability

    Medium 5.3

  • CVE-2024-10321

    All-in-One Addons for Elementor – WidgetKit <= 2.5.5 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates

    Medium 4.3

← Back to directory