ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor

Уязвимости

• CVE-2026-23693без авторизации→ 3.7.9

  ElementsKit Elementor Addons < 3.7.9 Unauthenticated Mailchimp REST Endpoint

  Критич. 9.3

• CVE-2024-3499участник+≤ 3.1.0

  ElementsKit Elementor addons <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Onepage Scroll Module

  Высокий 8.8

• CVE-2024-2047участник+≤ 3.0.6

  ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Local File Inclusion in render_raw

  Высокий 8.8

• CVE-2026-4362без авторизации≤ 3.8.2

  ElementsKit Elementor Addons <= 3.8.2 - Missing Authorization to Unauthenticated Widget Content Overwrite

  Средний 6.5

• CVE-2026-103064нужен вход≤ 4.0.6

  WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2026-103063нужен вход≤ 4.0.6

  WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2026-94500участник+≤ 4.0.5

  WordPress ElementsKit Elementor addons Lite plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2026-2600участник+≤ 3.7.9

  ElementsKit Elementor Addons and Templates <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Simple Tab Widget

  Средний 6.4

• CVE-2024-32505нужен вход≤ 3.0.6

  WordPress ElementsKit Elementor addons plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2025-3614участник+≤ 3.5.2

  ElementsKit Elementor Addons and Templates <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Widget

  Средний 5.4

• CVE-2025-4479участник+≤ 3.5.2

  ElementsKit Lite <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget

  Средний 5.4

• CVE-2024-11180участник+≤ 3.4.7

  ElementsKit Elementor addons <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2025-1005участник+≤ 3.4.0

  ElementsKit Elementor addons <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget

  Средний 5.4

• CVE-2024-10091участник+≤ 3.2.9

  ElementsKit Elementor addons <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget

  Средний 5.4

• CVE-2024-8546участник+≤ 3.2.7

  ElementsKit Elementor addons <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget

  Средний 5.4

• CVE-2024-3650участник+≤ 3.1.2

  The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Accordion widget in all ver

  Средний 5.4

• CVE-2024-2803участник+≤ 3.0.7

  ElementsKit Elementor addons <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

  Средний 5.4

• CVE-2024-1238участник+≤ 3.0.6

  ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2024-2042участник+≤ 3.0.5

  ElementsKit Elementor addons <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget

  Средний 5.4

• CVE-2024-1239участник+≤ 3.0.4

  ElementsKit Elementor addons <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2026-49053без авторизации≤ 3.9.6

  WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2025-0968без авторизации≤ 3.4.0

  ElementsKit Elementor addons <= 3.4.0 - Unauthenticated Information Exposure via get_megamenu_content Function

  Средний 5.3

• CVE-2024-37255без авторизации≤ 3.1.4

  WordPress ElementsKit Lite plugin <= 3.1.4 - Unauthenticated Broken Access Control vulnerability

  Средний 5.3

• CVE-2024-6455без авторизации≤ 3.2.0

  ElementsKit Elementor addons <= 3.2.0 - Unauthenticated Information Exposure via ekit_widgetarea_content Function

  Средний 5.3

• CVE-2023-6582без авторизации≤ 3.0.3

  ElementsKit Lite <= 3.0.3 - Unauthenticated Sensitive Information Exposure

  Средний 5.3

• CVE-2023-6525редактор+≤ 3.0.3

  ElementsKit Elementor addons <= 3.0.3 - Authenticated(Editor+) Stored Cross-Site Scripting

  Средний 4.8

• CVE-2026-49052нужен вход≤ 3.9.6

  WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability

  Средний 4.3

• CVE-2023-39993нужен вход≤ 2.9.0

  WordPress ElementsKit Lite plugin <= 2.9.0 - Broken Access Control vulnerability

  Средний 4.3